CVE-2026-72994

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to escalate their privileges locally, potentially gaining unauthorized access to sensitive system resources. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of exploitation. This is particularly critical for environments where biometric authentication is implemented, as it may expose them to significant security breaches.