Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.
CWE-122