CVE-2026-72980

Publié : 8 septembre 2026

Modifié : 8 septembre 2026

Lien officiel NVD

Score CVSS

4.4

MEDIUM

Description détaillée

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Références et Patchs

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72980

Dernières Vulnérabilités

CVE-2026-87658

Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)

VOIR DÉTAILS

CVE-2026-87657

Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

VOIR DÉTAILS

CVE-2026-87656

Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

VOIR DÉTAILS