CVE-2021-42288: Windows Hello Security Feature Bypass Vulnerability
Published Nov 10, 2021
·Updated
Windows Hello Security Feature Bypass Vulnerability
Affected Software
8 affected components
Microsoft Windows 10=20h2
Microsoft Windows 10=21h1
Microsoft Windows 10=1809
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=2004
Microsoft Windows Server 2019
Remediation
Event History
Nov 10, 2021
CVE Published
12:47 AM
Data Sourced
12:47 AM
DescriptionSeverity
Data Sourced
via NVD·01:19 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-42288?
CVE-2021-42288 is classified as a security feature bypass vulnerability, which may allow unauthorized access to certain functionalities.
2
How do I fix CVE-2021-42288?
To fix CVE-2021-42288, ensure that your Windows operating system is updated with the latest security patches provided by Microsoft.
3
Which Windows versions are affected by CVE-2021-42288?
CVE-2021-42288 affects Windows 10 versions 1809, 1909, 2004, 20H2, 21H1 and Windows Server versions 2016 and 2019.
4
What is the impact of CVE-2021-42288 on Windows Hello?
CVE-2021-42288 can lead to a bypass of Windows Hello's security features, potentially compromising user authentication.
5
Is there a workaround for CVE-2021-42288?
Currently, the recommended action is to install the necessary security updates from Microsoft as there is no effective workaround for CVE-2021-42288.