Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could bypass the Windows Hello security feature.
Please see Windows Hello | Microsoft Learn for more details.
Security updates
10.0.17763.7136 — https://support.microsoft.com/help/5055519
10.0.20348.3453 — https://support.microsoft.com/help/5055526
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.22621.5189 — https://support.microsoft.com/help/5055528
10.0.25398.1551 — https://support.microsoft.com/help/5055527
Vulnerabilities 1
-
Medium 6.5
Windows Hello Security Feature Bypass Vulnerability
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
Revision history
-
#1
Information published.
References
-
CVE-2025-26635 Windows Hello Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26635
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss