NetSight
high7.8

CVE-2026-69864

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Impact

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 21h2
before 10.0.19044.7725
MicrosoftWindows 10 22h2
before 10.0.19045.7725
MicrosoftWindows 11 23h2
before 10.0.22631.7582
MicrosoftWindows 11 24h2
before 10.0.26100.9445
MicrosoftWindows 11 25h2
before 10.0.26200.9445
MicrosoftWindows 11 26h1
before 10.0.28000.2954

Weakness classification

References