CVE-2026-72988

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to elevate their privileges locally, potentially granting them unauthorized access to sensitive system resources. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of privilege escalation attacks. This is particularly critical for environments where biometric authentication is utilized, as it may expose sensitive user data and system integrity.