Executive brief
Windows Biometric Service is a system component that handles fingerprint and other biometric authentication on Windows. A heap-based buffer overflow in this service allows an authenticated local attacker to execute code with elevated privileges, potentially leading to full system compromise.
Technical details
A heap-based buffer overflow vulnerability exists in the Windows Biometric Service due to improper bounds checking when processing biometric data. The vulnerability requires local access and prior authentication, making it suitable for privilege escalation attacks. An attacker with legitimate user access can trigger the overflow to execute arbitrary code in the context of the service (typically SYSTEM), achieving local privilege escalation. Microsoft has released patches to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed