CVE-2026-69864

Windows Hello is the feature that lets you sign in using face, fingerprint, or a PIN. This vulnerability is like a mistake in how Windows temporarily stores information during that sign-in process—under certain conditions, someone already able to interact with your session could use it to gain higher privileges on that PC.

This matters if your business uses Windows 10 or Windows 11 devices with Windows Hello (PIN/biometric) enabled and users can sign in locally. It’s mainly a risk when an attacker already has some legitimate access to the machine (for example, an account they can use on the device) and can trigger the Windows Hello behavior on that same system.

Treat this as urgent because it is a local privilege escalation flaw in Windows Hello: once someone has a foothold on the device, they may be able to raise privileges further. Even though CISA KEV does not list it and no public exploit code is known, the vulnerability targets a core sign-in component and the availability of updates means you should prioritize patching on affected endpoints now.