Microsoft Blocks Credential Autofill to Fix Windows Hello Flaw

2026-02-17

Microsoft's February 2026 Patch Tuesday blocked credential autofill in Windows 11 remote desktop and screen-sharing tools to address CVE-2026-20804, a Windows Hello tampering flaw demonstrated at Black Hat 2025 that allowed attackers to inject biometric data and bypass authentication without detection.