This vulnerability, identified as CVE-2026-83980, involves a heap-based buffer overflow in the Windows Biometric Service component of Microsoft Windows 10 Version 1607 (build 10.0.14393.0). The flaw enables an attacker with local authorized access to escalate privileges, potentially gaining higher system rights. The vulnerability is classified under CWE-122 (Heap-based Buffer Overflow). Microsoft has published an official fix to remediate this issue.

An authorized local attacker could exploit this heap-based buffer overflow to elevate their privileges, potentially gaining higher-level access to the system. This could lead to full system compromise depending on the privileges escalated. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft to address this vulnerability. It is recommended to apply the security update provided by Microsoft for Windows 10 Version 1607 (build 10.0.14393.0) as soon as possible. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83980 for detailed patch information and installation instructions.