Microsoft Windows Hello Security Feature Bypass Vulnerability

A vulnerability allowing an authorized attacker to bypass a security feature in Windows Hello has been identified. This issue arises from improper input validation, which could enable the attacker to undermine protections that rely on trusted TPM counters. The vulnerability affects several versions of Windows 10 and Windows 11.

Impact

Exploitation of this vulnerability could allow an attacker with administrative control to bypass Windows Hello's safeguards, potentially leading to the reuse of authentication keys and the loading of older, tampered settings.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200 for Windows 10 and KB5083768 for Windows 11.