CVE-2026-73008 in Windows

Résumé

par MITRE • 09/09/2026

Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Microsoft
• Réserver: 10/08/2026
• Divulgation: 09/09/2026
• Modérer: accepté
• Entrée: VDB-401036
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 5.5 (CNA)
• EPSS: 0.00000
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Energy, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-73008
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-73008
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-73008/