CVE-2026-69773
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
Risk Assessment
Risk of privilege escalation in the system, potentially leading to device compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Biometric Service
See all- CVE-2026-85831Medium
A heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
- CVE-2026-83988High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83987High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83986High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83985High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83983High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83982High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83981High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83980High
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83979High
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

