CVE-2026-72991 | Microsoft Windows up to Server 2025 Windows Biometric Service buffer overflow

September 9, 2026 Yanac

A vulnerability described as very critical has been identified in Microsoft Windows. This issue affects some unknown processing of the component Windows Biometric Service. The manipulation results in buffer overflow.

This vulnerability is identified as CVE-2026-72991. The attack is only possible with local access. There is not any exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More