Product:
Windows Biometric Service
Summary
Concurrent execution using shared resource with improper synchronization in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack. This vulnerability can lead to unauthorized access to sensitive information. The issue arises from a race condition that can be exploited under specific conditions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.1 | CVE-2026-32088 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the device running the Windows Biometric Service. By manipulating the timing of operations that access shared resources, the attacker can trigger the race condition, allowing them to bypass security features and gain unauthorized access to the system.
Affected Products
- Windows Biometric Service: Vulnerable to race condition allowing unauthorized access.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, physical security measures should be implemented to prevent unauthorized access to devices that utilize the Windows Biometric Service.