CVE-2026-72997

A heap-based buffer overflow vulnerability in the Windows Biometric Service allows authorized attackers to escalate their privileges locally, potentially gaining unauthorized access to sensitive system functions. Organizations using Windows systems, particularly those with biometric authentication enabled, should prioritize patching this vulnerability to mitigate the risk of exploitation. Immediate action is recommended for environments where sensitive data is handled or where compliance with security standards is critical.