CVE-2026-69725 – Windows Hello Elevation of Privilege Vulnerability

CVE-2026-69725 is a Windows Hello elevation-of-privilege vulnerability caused by a double-free weakness. An authorized local attacker who successfully exploits the vulnerability could elevate privileges to Virtual Trust Level 1 (VTL1). Exploitation requires low privileges and no user interaction. The source information contains conflicting attack-complexity statements: the CVSS metrics specify Low, while the FAQ states High and says successful exploitation requires winning a race condition.

CVSS SCORE: 7.8.

SEVERITY: Critical.

THREAT: Successful exploitation could allow an attacker with existing low-privileged local access to gain VTL1 privileges. The CVSS assessment rates confidentiality, integrity, and availability impacts as High, making successful privilege escalation potentially significant for affected Windows systems.

EXPLOITS: The vulnerability is marked as not publicly disclosed and not exploited. Exploit Code Maturity is Unproven. The source does not confirm the existence of a public exploit, zero-day exploitation, or publicly available proof-of-concept exploit code.

TECHNICAL SUMMARY: The vulnerability is identified as CWE-415, Double Free, in Windows Hello. A double-free condition occurs when memory is freed more than once, and in this case the weakness can lead to local elevation of privilege. A successful attacker could obtain VTL1 privileges. The CVSS vector specifies a local attack vector, low privileges, and no user interaction, with High confidentiality, integrity, and availability impacts. The accompanying FAQ states that exploitation requires winning a race condition, although its statement that attack complexity is High conflicts with the supplied CVSS vector, which records Attack Complexity as Low.

EXPLOITABILITY: Affected products include Windows 10 versions 21H2 and 22H2 on listed 32-bit, ARM64, and x64 systems, and Windows 11 versions 23H2, 24H2, 25H2, and 26H1 on the listed ARM64 and x64 systems. Exploitation is local, requires low privileges and no user interaction, and successful exploitation can provide VTL1 privileges.

BUSINESS IMPACT: This vulnerability could enable an attacker who already has limited local access to gain substantially greater privileges. Successful exploitation carries High confidentiality, integrity, and availability impact ratings, creating risks to sensitive information, system integrity, and operational availability. Privilege escalation can turn an initial foothold into a much more serious security incident.

WORKAROUND: No mitigation or workaround is identified. An official fix is listed, and affected systems require a restart after installation.

URGENCY: This vulnerability is rated Critical and affects multiple supported Windows 10 and Windows 11 versions. Although it is not marked as publicly disclosed or exploited and exploit maturity is Unproven, the potential for VTL1 privilege elevation and High impact across confidentiality, integrity, and availability makes prompt deployment important.