HIGH 8.7 Microsoft

CVE-2026-27928

Windows Hello Security Feature Bypass Vulnerability

Microsoft Security Update 2026-Apr: Windows Hello Security Feature Bypass Vulnerability

Affected Products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2022, 23H2 Edition (Server Core installation)
Windows Server 2025
Windows Server 2016

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27928
https://nvd.nist.gov/vuln/detail/CVE-2026-27928

Published: 2026-04-14 · Source: Microsoft · Feed updated: 2026-08-04

This high severity vulnerability with a CVSS score of 8.7 was published on 2026-04-14 via Microsoft. Affected: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022 and 5 more.

vulnfeed aggregates 9214 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.