Severity: Critical
CVSS Score: 8.2
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.