CVE-2021-34466

—1

CVSS 3.1

5.7 medium

EPSS

<1%p55

Published

Jul 16, 2021 (Jul 16, 2021)

Modified

Aug 10, 2026

Description

Windows Hello Security Feature Bypass Vulnerability

Vendors: microsoft
Products: windows 10
Weakness: CWE-290
Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news6 stories

Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero

The Hacker NewsJul 17, 11:52 UTC · Jul 17, 2021Vulnerability in the wildCVE-2021-34527 CVE-2021-31979 CVE-2021-33771+9 CVEs

60

July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs

Help Net SecurityJul 13, 00:00 UTC · Jul 13, 2021Vulnerability in the wildCVE-2021-34527 CVE-2021-34448 CVE-2021-33771+6 CVEs

60

Experts show how to bypass Windows Hello feature to login on Windows 10 PCs

Security AffairsJul 19, 08:20 UTC · Jul 19, 2021Exploit / PoC CVE-2021-34466

50

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

The Hacker NewsNov 23, 03:46 UTC · Nov 23, 2023Vulnerability CVE-2021-34466

35

Windows Hello bypassed using infrared image

The RecordDec 12, 00:00 UTC · Dec 12, 2022Vulnerability CVE-2021-34466

35

#BHUSA: Windows Hello Passwordless Bypass Revealed

Infosecurity MagazineAug 5, 22:09 UTC · Aug 5, 2021Vulnerability CVE-2021-34466

35