CVE-2026-69710 – Windows Hello Elevation of Privilege Vulnerability
CVSS 7.5
IMPORTANT
Critical - Same Day Deployment
“A successful race-condition attack could turn existing local access into powerful VTL1 privileges, putting the confidentiality, integrity, and availability of the system at risk.”
CVE-2026-69710 is a Critical elevation-of-privilege vulnerability in Windows Hello caused by improper synchronization of a shared resource during concurrent execution. An authorized local attacker who successfully wins a race condition could elevate privileges to Virtual Trust Level 1 (VTL1). Exploitation requires high privileges and high attack complexity but does not require user interaction. The vulnerability is not publicly disclosed and is not known to be exploited.
Key Details
- Attack Vector
- Local
- Attack Complexity
- High
- Privileges Required
- High
- User Interaction
- None
- CWE Classification
- CWE-362
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.