Windows Hello Security Feature Bypass Vulnerability

Windows Hello, Windows' facial recognition and fingerprint login system, has a weakness that allows someone with network access to bypass its security protections. This means an attacker could potentially log in as another user without proper authentication.

A weak authentication implementation in Windows Hello enables an authorized network attacker to circumvent the security feature, likely through replay attacks or improper validation of authentication tokens. Exploitation requires network-level access and valid initial authentication credentials to the system.