CVE-2026-72980
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
- Published Sep 8, 2026
- CVSS 5.5 medium
- 0.6% chance of exploitation in the next 30 days (EPSS)
- A fix is available
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.