CVE Catalog
CVE-2026-61928
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
Risk Assessment
An authorized user could alter or replace authentication data, potentially leading to security breaches.
Recommendation
Install Windows security updates and enable encryption for authentication data.
Original NVD description (English source)
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.