Advisories
Vulnerabilities we’ve found in our own research and disclosed to the responsible party under our coordinated disclosure policy. The technical advisory and proof of concept live in our advisory database on GitHub; the entries here add context, status and any write-up.
2026
- high Persistent Remote DoS via Integer Underflow in Wire iOS CVE-2026-35049 Wire ✓ fixed fixed in 17d
2024
- high Windows Hello bypass in Synaptics fingerprint readers on Lenovo ThinkPad CVE-2024-23592 Synaptics ✓ fixed
- high Windows Hello bypass via sensor spoofing in the ELAN fingerprint sensor CVE-2024-0454 ELAN ✓ fixed
2023
- high Windows Hello bypass via unauthenticated template-database selection in the Goodix fingerprint sensor CVE-2023-50430 Goodix ✓ fixed
