CVE-2026-77489

A null pointer dereference vulnerability in the Windows Biometric Service allows authorized attackers to escalate their privileges locally, potentially granting them unauthorized access to sensitive system resources. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of privilege escalation attacks. This is particularly critical for environments where biometric authentication is implemented, as it could lead to significant security breaches.