Description
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Windows 10 Version 1809
10.0.17763.0 to < 10.0.17763.7136affected
Microsoft Windows 10 Version 21H2
10.0.19044.0 to < 10.0.19044.5737affected
Microsoft Windows 10 Version 22H2
10.0.19045.0 to < 10.0.19045.5737affected
Microsoft Windows 11 version 22H2
10.0.22621.0 to < 10.0.22621.5189affected
Microsoft Windows 11 version 22H3
10.0.22631.0 to < 10.0.22631.5189affected
Microsoft Windows 11 Version 23H2
10.0.22631.0 to < 10.0.22631.5189affected
Microsoft Windows 11 Version 24H2
10.0.26100.0 to < 10.0.26100.3775affected
Microsoft Windows Server 2019
10.0.17763.0 to < 10.0.17763.7136affected
Microsoft Windows Server 2019 (Server Core installation)
10.0.17763.0 to < 10.0.17763.7136affected
Microsoft Windows Server 2025
10.0.26100.0 to < 10.0.26100.3775affected
Microsoft Windows Server 2025 (Server Core installation)
10.0.26100.0 to < 10.0.26100.3775affected