{"data":{"id":"f69d1f36-2533-4106-a617-9517e296c59e","title":"CVE-2025-26644: Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows…","summary":"CVE-2025-26644 is a vulnerability in Windows Hello, classified as CWE-1039 (Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations). The flaw lets an unauthorized attacker perform spoofing locally. NVD has not yet provided an assessment, and the record was published on 04/08/2025 and last modified on 07/10/2025.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-26644","publishedAt":"2025-04-08T18:15:48.347Z","cveId":"CVE-2025-26644","cweIds":["CWE-1039"],"cvssScore":"5.1","cvssSeverity":"medium","severity":"medium","attackType":["model_evasion"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Windows Hello"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Windows Hello spoofing via adversarial input perturbations","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0056,"epssCheckedAt":"2026-11-04T06:10:13.536Z","kevDateAdded":null,"advisoryAliases":["GHSA-2f5r-r4jx-hh42"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:41.637Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[]}}