High MSRC-CVE-2025-26644 1 CVE

Windows Hello Spoofing Vulnerability

Published Apr 8, 2025 · Updated Apr 8, 2025

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.17763.7136 — https://support.microsoft.com/help/5055519
10.0.19044.5737 — https://support.microsoft.com/help/5055518
10.0.22621.5189 — https://support.microsoft.com/help/5055528
10.0.26100.3775 — https://support.microsoft.com/help/5055523

Vulnerabilities 1

Medium 5.1

CVE-2025-26644

Windows Hello Spoofing Vulnerability

Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 8, 2025

Revision history

2025-04-08 #1
Information published.

References

CVE-2025-26644 Windows Hello Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-26644
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss