---
id: "CVE-2026-96127"
page: "https://infrastack.ai/live/CVE-2026-96127"
kind: "vulnerability"
aliases: ["CVE-2026-96127"]
title: "Windows Biometric Service heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:22:10+00:00"
first_seen_at: "2026-11-10T19:25:31+00:00"
updated_at: "2026-11-10T20:07:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96127", "first_seen_at": "2026-11-10T19:25:31+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-96127", "first_seen_at": "2026-11-10T20:07:41+00:00", "cites": ["https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-96127"]}]
exploit_sources: []
---

# Windows Biometric Service heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-96127 (this .md is for agents)

A heap-based buffer overflow in the Windows Biometric Service lets an attacker who already has a local account raise their privileges. The sources do not name affected Windows versions or a fix.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Unknown build list. Confirm the November 2026 cumulative update (released 2026-11-10) is installed on each Windows host: run 'Get-HotFix' or check Settings > Windows Update > Update history. Look up this CVE in the Microsoft Security Update Guide for the exact KB per Windows version.

## Fix

Install the November 2026 Windows security update (MSRC lists this CVE in it). Exact KB numbers and builds are not yet read from a Microsoft page.

## Timeline

- 2026-11-10T19:25:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96127
- 2026-11-10T20:07:41+00:00 analyst https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-96127 — MSRC CVRF API lists the CVE in the November 2026 Security Updates (released 2026-11-10). The MSRC page is JS-only and the CVRF document came back empty, so affected builds, KBs and mitigations are unconfirmed. Nothing verified. Sibling Biometric Service CVEs from Sep 2026 are rated Important, Exploitation Unlikely or Less Likely; that does not apply to this CVE. Revisit when the Update Guide page renders or the CSAF/CVRF data has the KBs.

## Documents

- [advisory] MSRC API: CVE-2026-96127 listed in November 2026 Security Updates https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-96127

## From the sources

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_