🚨 CVE-2026-70280
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.