CVE-2026-69368
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could gain elevated privileges, potentially leading to full system control.
Recommendation
Install security updates from Microsoft for Windows Overlay Filter.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-69373Medium
The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.
- CVE-2026-69371High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69350Medium
A heap-based buffer overflow vulnerability in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69343Medium
An out-of-bounds read vulnerability in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-69316Medium
A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-50435High
Windows Overlay Filter has a buffer over-read vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50409Medium
A vulnerability in the Windows Overlay Filter allows an unauthorized actor to disclose sensitive information. This flaw enables an authorized attacker to disclose information locally.
- CVE-2026-54987High
Windows Overlay Filter has a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2021-26874High
Windows Overlay Filter Elevation of Privilege Vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS