CVE-2021-42288: Windows Hello Security Feature Bypass Vulnerability
Windows Hello Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1348Patch KB5007186 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19041.1348Patch KB5007186 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.18363.1916Patch KB5007189 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1348Patch KB5007186 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.2300Patch KB5007206
Event History
Frequently Asked Questions
What is the severity of CVE-2021-42288?
CVE-2021-42288 is classified as a security feature bypass vulnerability, which may allow unauthorized access to certain functionalities.
How do I fix CVE-2021-42288?
To fix CVE-2021-42288, ensure that your Windows operating system is updated with the latest security patches provided by Microsoft.
Which Windows versions are affected by CVE-2021-42288?
CVE-2021-42288 affects Windows 10 versions 1809, 1909, 2004, 20H2, 21H1 and Windows Server versions 2016 and 2019.
What is the impact of CVE-2021-42288 on Windows Hello?
CVE-2021-42288 can lead to a bypass of Windows Hello's security features, potentially compromising user authentication.
Is there a workaround for CVE-2021-42288?
Currently, the recommended action is to install the necessary security updates from Microsoft as there is no effective workaround for CVE-2021-42288.