CVE-2026-72992

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to escalate their privileges locally, potentially leading to unauthorized access and control over the affected system. Organizations using Windows systems, particularly those with biometric authentication enabled, should prioritize patching this vulnerability to mitigate the risk of exploitation.