CVE-2026-69740 – Windows Hello Elevation of Privilege Vulnerability
CVSS 8.8
IMPORTANT
Critical - Same Day Deployment
"A successful attack could turn limited local access into highly privileged control, putting sensitive Windows security boundaries at risk."
A use-after-free vulnerability in Windows Hello could allow an authorized local attacker to elevate privileges. Successful exploitation could grant Virtual Trust Level 1 (VTL1) privileges and result in high impact to confidentiality, integrity, and availability. The vulnerability affects multiple Windows 11 releases on both x64 and ARM64 systems.
Key Details
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-416
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.