CVE-2026-72980

An uncontrolled search path vulnerability in Windows Hello allows an authorized attacker to bypass security features locally, potentially compromising user authentication. This issue primarily affects Windows systems and could lead to unauthorized access to sensitive information or system functions. Organizations using Windows Hello should prioritize addressing this vulnerability to maintain the integrity of their authentication processes.