AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-83907

Microsoft Windows Hello: system information exposure

Microsoft

CVE-2026-83907 · Published Oct 13, 2026 · updated Oct 29, 2026

Medium5.5
Fix: upgrade to 10.0.19044.7807 or later (7 fixed versions below)
Microsoft advisory

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.

Affected versions

PackageAffectedFixed in
Windows 10 Version 21H2
Product
>= 10.0.19044.0, < 10.0.19044.780710.0.19044.7807
Windows 10 Version 22H2
Product
>= 10.0.19045.0, < 10.0.19045.780710.0.19045.7807
Windows 11 Version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 Version 24H2
Product
>= 10.0.26100.0, < 10.0.26100.971110.0.26100.9711
Windows 11 Version 25H2
Product
>= 10.0.26200.0, < 10.0.26200.971110.0.26200.9711
Windows 11 Version 26H2
Product
>= 10.0.26300.0, < 10.0.26300.971110.0.26300.9711
Windows 11 version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.323110.0.28000.3231
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-497

More Microsoft advisories

All Microsoft
High 8.0Oct 13Microsoft SQL Server: stack buffer overflowCVE-2026-96956fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-94512fixed in 14.0.2140.2 +7Medium 6.4Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88085fixed in 14.0.2140.2 +7Medium 5.3Oct 13Microsoft SQL Server: out-of-bounds readCVE-2026-88086fixed in 15.0.2200.2 +5High 7.0Oct 13Microsoft SQL Server: integer overflowCVE-2026-88088fixed in 15.0.2200.2 +5Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88089fixed in 14.0.2140.2 +7