EUVD-2026-73640
GHSA-qgw2-3v25-m63w
Severity by source
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Local attack vector and high-privilege prerequisite accurately reflect an authorized local attacker; scope change captures OS-level privilege escalation beyond the Windows Hello boundary.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
AnalysisAI
Heap-based buffer overflow in Windows Hello allows an attacker who already holds elevated local access to escalate privileges beyond the Windows Hello security boundary, achieving high confidentiality, integrity, and availability impact across the broader Windows system. Affected builds span Windows 10 21H2/22H2 and Windows 11 23H2 through 26H1, representing virtually all currently supported Windows feature releases. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) local authenticated access to the target Windows system (AV:L); (2) an account holding elevated, 'authorized' privileges as indicated by PR:H - a standard unprivileged user account cannot directly trigger the vulnerability. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 8.2 is driven primarily by the scope change and full C:H/I:H/A:H impact triad, but the local attack vector (AV:L) and high privilege requirement (PR:H) substantially constrain realistic exploitability - an attacker must first obtain authorized elevated local access to the target system before triggering the heap overflow. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released security update via Windows Update, WSUS, or Microsoft Update Catalog targeting the following fixed build numbers: Windows 10 21H2 → 10.0.19044.7725; Windows 10 22H2 → 10.0.19045.7725; Windows 11 23H2 → 10.0.22631.7582; Windows 11 24H2 → 10.0.26100.9445; Windows 11 25H2 → 10.0.26200.9445; Windows 11 26H1 → 10.0.28000.2954. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct an inventory of all systems running Windows 10 versions 21H2/22H2 or Windows 11 versions 23H2 through 26H1 to assess organizational exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today