{"id":"CVE-2026-61928","revision":"f3b83dcd0f3744c69b184fd3d8f385d2","records":[{"revision":"f3b83dcd0f3744c69b184fd3d8f385d2","observedAt":"2026-11-10T23:21:22.745+00:00","statement":{"source":"cve-program","id":"CVE-2026-61928","aliases":[],"title":"Windows Hello Tampering Vulnerability","description":"Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.","state":0,"publishedAt":"2026-08-11T17:03:56.249+00:00","modifiedAt":"2026-11-10T21:57:37.491+00:00","affected":[{"ecosystem":"Vendor product","name":"Windows 10 Version 1607","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 10 Version 1607\",\n \"platforms\": [\n \"32-bit Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.14393.0\",\n \"lessThan\": \"10.0.14393.9418\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1809","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 10 Version 1809\",\n \"platforms\": [\n \"32-bit Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.17763.0\",\n \"lessThan\": \"10.0.17763.9121\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 21H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 10 Version 21H2\",\n \"platforms\": [\n \"32-bit Systems\",\n \"ARM64-based Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.19044.0\",\n \"lessThan\": \"10.0.19044.7663\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 22H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 10 Version 22H2\",\n \"platforms\": [\n \"32-bit Systems\",\n \"ARM64-based Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.19045.0\",\n \"lessThan\": \"10.0.19045.7663\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 11 version 23H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 11 version 23H2\",\n \"platforms\": [\n \"ARM64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.22631.0\",\n \"lessThan\": \"10.0.22631.7517\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 11 Version 23H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 11 Version 23H2\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.22631.0\",\n \"lessThan\": \"10.0.22631.7517\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 11 Version 24H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 11 Version 24H2\",\n \"platforms\": [\n \"ARM64-based Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.26100.0\",\n \"lessThan\": \"10.0.26100.9168\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 11 Version 25H2","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 11 Version 25H2\",\n \"platforms\": [\n \"ARM64-based Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.26200.0\",\n \"lessThan\": \"10.0.26200.9168\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows 11 version 26H1","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows 11 version 26H1\",\n \"platforms\": [\n \"ARM64-based Systems\",\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.28000.0\",\n \"lessThan\": \"10.0.28000.2704\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2016","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2016\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.14393.0\",\n \"lessThan\": \"10.0.14393.9418\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2016 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2016 (Server Core installation)\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.14393.0\",\n \"lessThan\": \"10.0.14393.9418\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2019","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2019\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.17763.0\",\n \"lessThan\": \"10.0.17763.9121\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2019 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2019 (Server Core installation)\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.17763.0\",\n \"lessThan\": \"10.0.17763.9121\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2022","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2022\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.20348.0\",\n \"lessThan\": \"10.0.20348.5499\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2025","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2025\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.26100.0\",\n \"lessThan\": \"10.0.26100.33296\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"},{"ecosystem":"Vendor product","name":"Windows Server 2025 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Microsoft\",\n \"product\": \"Windows Server 2025 (Server Core installation)\",\n \"platforms\": [\n \"x64-based Systems\"\n ],\n \"versions\": [\n {\n \"version\": \"10.0.26100.0\",\n \"lessThan\": \"10.0.26100.33296\",\n \"versionType\": \"custom\",\n \"status\": \"affected\"\n }\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C","score":5.5,"severity":"MEDIUM"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61928"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-61928","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-61928","identifiers":["CVE-2026-61928"]},"retained":false,"historicalAffected":[]}],"coverage":[]}