Executive Summary

Integer overflow in Windows Biometric Service enables an authorized local attacker to gain elevated privileges, potentially compromising system integrity and confidentiality. The flaw allows manipulation of internal counters, leading to privilege escalation without requiring remote access.

---

Authoritative CVE Metadata - CVSS Base Score: 7.8 (HIGH) - Published: 2026-09-08T18:20:28.713 - Last Modified: 2026-09-12T04:16:37.457

Original Description: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

"Our kindness may be the most persuasive argument for that which we believe."

— Gordon Hinckley