CVE-2026-96127 | Microsoft Windows up to Server 2025 Windows Biometric Service heap-based overflow

November 11, 2026 Yanac

A vulnerability described as very critical has been identified in Microsoft Windows. Affected by this issue is some unknown functionality of the component Windows Biometric Service. Such manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-96127. An attack has to be approached locally. There is no exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More