CVE-2026-69373
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.
Risk Assessment
The risk is the possibility of privilege escalation, which may lead to full system compromise.
Recommendation
Install security updates for Windows. Restrict local access and monitor activities of privileged users.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-69371High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69368High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69350Medium
A heap-based buffer overflow vulnerability in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69343Medium
An out-of-bounds read vulnerability in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-69316Medium
A buffer over-read in the Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-50435High
Windows Overlay Filter has a buffer over-read vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-50409Medium
A vulnerability in the Windows Overlay Filter allows an unauthorized actor to disclose sensitive information. This flaw enables an authorized attacker to disclose information locally.
- CVE-2026-54987High
Windows Overlay Filter has a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2021-26874High
Windows Overlay Filter Elevation of Privilege Vulnerability.
Original NVD description (English source)
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

