What the vulnerability does
01Description
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
CVSS base score
5.1/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
Key dates
02Disclosure timeline
April 8, 2025
CVE published
February 13, 2026
Record updated
External resources
