CVE-2026-83969: CWE-122: Heap-based Buffer Overflow in Microsoft Windows 10 Version 1607

This vulnerability (CVE-2026-83969) involves a heap-based buffer overflow in the Windows Biometric Service component of Microsoft Windows 10 Version 1607 and later versions. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The vulnerability is rated high severity with a CVSS 3.1 score of 7.8, reflecting its potential impact on confidentiality, integrity, and availability. Microsoft has published an official security update to remediate this issue.

Successful exploitation of this heap-based buffer overflow can allow an authorized local attacker to elevate their privileges, potentially gaining higher system rights than intended. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the system.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 10 Version 1607 and the affected builds as listed in the vendor advisory. No additional mitigation is required beyond applying the official patch.