SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69710

HIGH · CVSS 7.5 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A race condition vulnerability in Windows Hello allows an authorized attacker to exploit improper synchronization of shared resources, potentially leading to local privilege escalation. This high-severity flaw could enable attackers to gain elevated access to system functions and data. Organizations using Windows systems should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-69710
Severity
HIGH
CVSS
7.5
EPSS
0.19%
Windows

Original NVD Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.