← Terug naar CVE-database CVE-2026-27906 MEDIUM · 4.4 CVSS Gepubliceerd: 14-04-2026 CWE-20 Beschrijving Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally. Vendors Microsoft Affected products Windows 10 21h2 Windows 10 22h2 Windows 11 23h2 Windows 11 24h2 Windows 11 25h2 Windows 11 26h1 References msrc.microsoft.com