Executive brief
Windows Biometric Service is a core Windows component that processes biometric data (fingerprints, iris scans, and facial recognition). A heap buffer overflow in this service allows an authorized local user to execute arbitrary code with elevated privileges, potentially giving an attacker full control over the computer.
Technical details
A heap-based buffer overflow vulnerability exists in Windows Biometric Service, triggered during biometric data processing when insufficient bounds checking is performed on user-supplied input. The vulnerability requires local system access and an authenticated user context to exploit. Successful exploitation allows an attacker to overwrite heap memory, corrupt data structures, and achieve arbitrary code execution with SYSTEM privileges. Microsoft has released patches through its Security Update Guide addressing this issue.
Affected products
- Microsoft Windows Biometric Service <UNKNOWN>
Timeline
- 2026-09-08: disclosed
- 2026-09-08: advisory