CVE-2026-72991

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to elevate their privileges locally, potentially leading to unauthorized access and control over the affected system. Organizations using Windows systems, particularly those with biometric authentication features, should prioritize patching this vulnerability to mitigate the risk of exploitation.