Windows Biometric Service Elevation of Privilege Vulnerability

Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-96127 · score 7.8/10

What could go wrong?

Someone who already has a normal account could give themselves full admin rights.

How urgent is it?

Check Microsoft’s page for details.

Who is affected?

Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation) and 18 more versions

What should I do?

Install this month’s updates via Windows Update, Intune or your update tool, then restart.

Known problems

Microsoft lists known issues per update: KB5123099, KB5122876, KB5122878, KB5122882, KB5122880, KB5124008. Official page.