CVE-2021-34466: Windows Hello Security Feature Bypass Vulnerability
Windows Hello Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1679Patch KB5004245 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1110Patch KB5004237 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2061Patch KB5004244 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1110Patch KB5004237
Event History
Frequently Asked Questions
What is the severity of CVE-2021-34466?
CVE-2021-34466 is rated as important due to its potential to bypass the Windows Hello security feature.
How do I fix CVE-2021-34466?
To fix CVE-2021-34466, apply the latest security updates provided by Microsoft for affected versions of Windows 10.
Which versions of Windows 10 are affected by CVE-2021-34466?
CVE-2021-34466 affects Windows 10 versions 1809, 1909, 2004, 20H2, and 21H1.
What are the potential impacts of CVE-2021-34466?
Exploiting CVE-2021-34466 could allow an attacker to bypass the security measures of Windows Hello, potentially compromising sensitive information.
Is CVE-2021-34466 actively exploited in the wild?
There have been no publicly reported cases of CVE-2021-34466 being actively exploited in the wild.