CVE-2026-69316
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential memory data leakage, which may expose sensitive system information.
Recommendation
Install Windows security updates. Restrict access to overlay features to trusted processes only.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-69373Medium
The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.
- CVE-2026-69371High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69368High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69350Medium
A heap-based buffer overflow vulnerability in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69343Medium
An out-of-bounds read vulnerability in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-50435High
Windows Overlay Filter has a buffer over-read vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50409Medium
A vulnerability in the Windows Overlay Filter allows an unauthorized actor to disclose sensitive information. This flaw enables an authorized attacker to disclose information locally.
- CVE-2026-54987High
Windows Overlay Filter has a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2021-26874High
Windows Overlay Filter Elevation of Privilege Vulnerability.
Original NVD description (English source)
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

