Quick answers
- Is CVE-2026-77489 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-77489 being exploited in the wild.
- How severe is CVE-2026-77489?
- High severity, with a CVSS score of 7.8, published 8 September 2026.
- Which products and versions are affected?
- Microsoft Windows Biometric Service.
- Is there a fix for CVE-2026-77489?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-77489 attacked?
- It is attacked with local access, in a hosted service.
- Am I affected by CVE-2026-77489?
- Check whether you run Microsoft Windows Biometric Service. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A null pointer dereference vulnerability exists in the Windows Biometric Service, likely stemming from insufficient input validation or missing pointer checks in the biometric processing code path. The vulnerability requires local access and prior authentication as a standard user. An attacker can craft malicious input to trigger the null pointer dereference, leading to a denial-of-service condition or local privilege escalation depending on exploitation technique. Microsoft has released patches to address this issue.
Affected products
- Microsoft Windows Biometric Service
Timeline
- 2026-09-08: disclosed