CVE-2026-72990

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to escalate their privileges locally, potentially compromising system integrity and control. Organizations utilizing Windows systems, particularly those with biometric authentication features, should prioritize patching this vulnerability to mitigate the risk of unauthorized access and privilege escalation.