CVE-2026-69799 – Windows Hello Elevation of Privilege Vulnerability
CVSS 7.8
IMPORTANT
Critical - Same Day Deployment
“A successful race-condition attack could turn limited local access into powerful VTL1 privileges, putting system confidentiality, integrity, and availability at risk.”
CVE-2026-69799 is a critical elevation-of-privilege vulnerability in Windows Hello caused by improper synchronization when a shared resource is accessed concurrently. An authorized local attacker with low privileges could exploit a race condition to gain Virtual Trust Level 1 (VTL1) privileges. Successful exploitation can have a high impact on confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Local
- Attack Complexity
- High
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-362
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.