← All advisories

Medium severity5.5NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026

CVE-2026-61928

CVE-2026-61928

Description

Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.

Affected products

1

Microsoft/Windows Hellollm-fuzzy

Patches

Vulnerability mechanics

References

1

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61928nvd

News mentions

1

Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-Days
Cyber Security News · Aug 11, 2026