Executive brief
Windows Biometric Service is a core Windows component that processes fingerprint and other biometric authentication data. A heap-based buffer overflow vulnerability allows a local attacker who already has some system access to execute arbitrary code with elevated privileges, potentially gaining full control over the system.
Technical details
A heap-based buffer overflow exists in the Windows Biometric Service (WinBio) that processes biometric input data. The vulnerability can be exploited by an authenticated local attacker to corrupt heap memory and achieve privilege escalation. The attack requires existing local access to the system and does not require network connectivity. Successful exploitation grants an attacker arbitrary code execution at elevated privileges (SYSTEM level), enabling complete system compromise. Microsoft has released security patches to address this vulnerability.
Affected products
- Microsoft Windows Biometric Service <UNKNOWN>
Timeline
- 2026-09-08: disclosed