We use optional cookies to improve your experience on our websites, such as through social media connections, and to display personalized advertising based on your online activity. If you reject optional cookies, only cookies necessary to provide you the services will be used. You may change your selection by clicking “Manage Cookies” at the bottom of the page. Privacy Statement Third-Party Cookies Accept Reject Manage cookies MSRC  Customer Guidance  Security Update Guide  Vulnerabilities  CVE-2026-32088 Windows Biometric Service Security Feature Bypass Vulnerability New On this page  CVE-2026-32088  Subscribe RSS PowerShell  API  CSAF Security Vulnerability Released: Apr 14, 2026 Assigning CNA Microsoft CVE.org link CVE-2026-32088  Impact Security Feature Bypass Max Severity Important Weakness CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVSS Source Microsoft Vector String CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C Metrics CVSS:3.1 6.1 / 5.3  Base score metrics: 6.1 / Temporal score metrics: 5.3  Expand all  Collapse all Metric Value   Base score metrics(8) Attack Vector Physical Attack Complexity Low Privileges Required None User Interaction None Scope Unchanged Confidentiality High Integrity High Availability None   Temporal score metrics(3) Exploit Code Maturity Unproven Remediation Level Official Fix Report Confidence Confirmed Please see Common Vulnerability Scoring System for more information on the definition of these metrics. Executive Summary Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack. Exploitability The following table provides an exploitability assessment for this vulnerability at the time of original publication. Publicly disclosed No Exploited No Exploitability assessment Exploitation Less Likely FAQ What kind of security feature could be bypassed by successfully exploiting this vulnerability? This vulnerability could allow an attacker to bypass the Windows biometric authentication feature. A malicious biometric device could be incorrectly recognized as trusted, allowing an attacker to falsely present biometric data and potentially gain access to the device without the legitimate user's fingerprint or face. Acknowledgements  Parag Mali Microsoft recognizes the efforts of those in the security community who help us protect customers through coordinated vulnerability disclosure. See Acknowledgements for more information. Security Updates To determine the support lifecycle for your software, see the Microsoft Support Lifecycle. Release date Descending  Edit columns  Download  Filters  Product Family  Max Severity  Impact  Platform   Clear Release date  Product Platform Impact Max Severity Article Download Build Number Assigning CNA Customer Action Required Title: Release date, Content: Apr 14, 2026 Windows 11 Version 23H2 for x64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 11 Version 23H2 for x64-based Systems, Content:, 1 link 5082052  Title: Download Security Update for Windows 11 Version 23H2 for x64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.22631.6936 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 11 Version 23H2 for ARM64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 11 Version 23H2 for ARM64-based Systems, Content:, 1 link 5082052  Title: Download Security Update for Windows 11 Version 23H2 for ARM64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.22631.6936 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 11 Version 25H2 for x64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 11 Version 25H2 for x64-based Systems, Content:, 1 link 5083769  Title: Download Security Update for Windows 11 Version 25H2 for x64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.26200.8246 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 11 Version 25H2 for ARM64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 11 Version 25H2 for ARM64-based Systems, Content:, 1 link 5083769  Title: Download Security Update for Windows 11 Version 25H2 for ARM64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.26200.8246 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows Server 2025 (Server Core installation) - Security Feature Bypass Important Title: Knowledge Base Articles for Windows Server 2025 (Server Core installation), Content:, 1 link 5082063  Title: Download Security Update for Windows Server 2025 (Server Core installation), Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.26100.32690 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 22H2 for 32-bit Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 22H2 for 32-bit Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 22H2 for 32-bit Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19045.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 22H2 for ARM64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 22H2 for ARM64-based Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 22H2 for ARM64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19045.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 22H2 for x64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 22H2 for x64-based Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 22H2 for x64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19045.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 21H2 for x64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 21H2 for x64-based Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 21H2 for x64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19044.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 21H2 for ARM64-based Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 21H2 for ARM64-based Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 21H2 for ARM64-based Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19044.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows 10 Version 21H2 for 32-bit Systems - Security Feature Bypass Important Title: Knowledge Base Articles for Windows 10 Version 21H2 for 32-bit Systems, Content:, 1 link 5082200  Title: Download Security Update for Windows 10 Version 21H2 for 32-bit Systems, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.19044.7184 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows Server 2022 (Server Core installation) - Security Feature Bypass Important Title: Knowledge Base Articles for Windows Server 2022 (Server Core installation), Content:, 1 link 5082142  Title: Download Security Update for Windows Server 2022 (Server Core installation), Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.20348.5020 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows Server 2022 - Security Feature Bypass Important Title: Knowledge Base Articles for Windows Server 2022, Content:, 1 link 5082142  Title: Download Security Update for Windows Server 2022, Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.20348.5020 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows Server 2019 (Server Core installation) - Security Feature Bypass Important Title: Knowledge Base Articles for Windows Server 2019 (Server Core installation), Content:, 1 link 5082123  Title: Download Security Update for Windows Server 2019 (Server Core installation), Content:, 1 link Security Update  Title: Build numbers, Content: 10.0.17763.8644 Title: Assigning CNA, Content: Microsoft Title: Customer action required, Content: Required Title: Release date, Content: Apr 14, 2026 Windows Server 2019 - Security Feature Bypass Important Title: Knowledge Base Articles for Windows Server 2019, Content:, 1 link 5082123  Title: Download Security Upd