MSRC-CVE-2021-34466 — Windows Hello Security Feature Bypass Vulnerability

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Where can I find more information about Windows Hello Face Authentication?
Please see Windows Hello Face Authentication for updated details.
Please see KB5005478 - Windows Hello CVE-2021-34466 for more details.

Security updates
10.0.17763.2061 — https://support.microsoft.com/help/5004244
10.0.18363.1679 — https://support.microsoft.com/help/5004245
10.0.19043.1110 — https://support.microsoft.com/help/5004237

Vulnerabilities 1

Medium 5.7

CVE-2021-34466

Windows Hello Security Feature Bypass Vulnerability

Windows Hello Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1809 Windows 10 Version 20H2 Windows 10 Version 1909 Windows

Jul 16, 2021

Revision history

2021-08-04 #2
Updated FAQ information. This is an informational change only.
2021-07-13 #1
Information published.

References

CVE-2021-34466 Windows Hello Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34466
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss