CVE-2026-54987
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Windows Overlay Filter has a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker can gain higher privileges on the system, potentially leading to full system compromise.
Recommendation
Install the appropriate security update from Microsoft.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-50435High
Windows Overlay Filter has a buffer over-read vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50409Medium
A vulnerability in the Windows Overlay Filter allows an unauthorized actor to disclose sensitive information. This flaw enables an authorized attacker to disclose information locally.
- CVE-2021-26874High
Windows Overlay Filter Elevation of Privilege Vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.