CVE-2026-105004

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw may be exploited to gain higher privileges on the system.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to elevate privileges locally.

Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to execute code locally.

The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.