CVE-2026-27906

Description

Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVSS Vector

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27906