Windowshello Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Windowshello Project records in CISA KEV

No Windowshello Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Windowshello 1 record LOW

Records

1 record

TI-2020-08879 CVE-2020-11005 · GHSA-wvpv-ffcv-r6cw

Internal NCryptDecrypt method could be used externally from WindowsHello library.

LOW 24

The WindowsHello open source library (NuGet HaemmerElectronics.SeppPenner.WindowsHello), before version 1.0.4, has a vulnerability where encrypted data could potentially be decrypted without needing authentication.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00234 Published 2020-04-14 Fixed in 1.0.4 CWE-288

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0