CVE-2026-83968

CVE-2026-83968 is a use-after-free memory-safety flaw in the Windows Biometric Service that Microsoft assigned and rated High (CVSS 3.1 7.8). An attacker who already has authorized low-privileged access on a local machine can trigger the flaw in the service, causing it to use freed memory and corrupt its execution. Successful exploitation allows the attacker to elevate privileges on the local system, gaining high confidentiality, integrity, and availability impact from that host. Affected systems are Windows installations running the Windows Biometric Service, though the data provided does not specify the affected Windows version ranges. As of this analysis there is no known in-the-wild exploitation, no public proof-of-concept, and a modest EPSS of 0.3% (25th percentile) for exploitation within 30 days.

What to do: Apply Microsoft's security update for CVE-2026-83968 as part of your regular patch cycle, prioritizing shared or multi-user Windows hosts where local privilege escalation has higher value. Because no public proof-of-concept or in-the-wild exploitation is known, this can be handled as standard-priority patching, but track Microsoft's advisory to confirm which Windows versions are affected and verify patch status on endpoints via your inventory/patch management tooling. Restricting local logon rights to untrusted users on sensitive systems reduces exposure while patching completes.