SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-81354

HIGH · CVSS 8.2 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A heap-based buffer overflow vulnerability in Windows Hello allows an authorized attacker to escalate privileges on affected Windows systems. This could enable the attacker to gain unauthorized access to sensitive resources or execute arbitrary code with elevated permissions. Organizations using Windows Hello should prioritize remediation to mitigate potential exploitation risks.

CVE
CVE-2026-81354
Severity
HIGH
CVSS
8.2
EPSS
0.24%
Windows

Original NVD Description

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)