VULNERABILITY INTELLIGENCE
CVE-2025-47969
CVSS score4.4 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17
Description
Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose information locally.
Primary references
- microsoft — vendor-advisory, patch