CVE-2026-69958
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
Risk Assessment
The risk involves potential system takeover through physical attack, potentially leading to full compromise.
Recommendation
Apply security updates immediately and secure physical access to the system.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-96315Medium
Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
- CVE-2026-83879High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-83749High
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw may be exploited to gain higher privileges on the system.
- CVE-2026-83727High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69967Medium
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-69959High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.
- CVE-2026-69957High
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2026-69954Medium
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
- CVE-2026-69953High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.
- CVE-2026-69952High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS