Local tampering via cleartext secret storage

Cleartext storage in Windows Hello on affected Windows releases allows local users to tamper with sensitive authentication data. Microsoft's published record identifies Windows Hello as storing sensitive information in cleartext, but no public advisory, CVE record reference, or patch note retrieved here discloses the file, registry, or code path that writes the data without protection. Exploitation requires local access with existing authorization on a vulnerable Windows client or server build, and the published scoring bounds the consequence to integrity impact rather than code execution or service interruption.