CVE-2026-69959
HighCVSS 7.8Summary
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.
Risk Assessment
An attacker can execute arbitrary code in a local context, potentially compromising data confidentiality and integrity.
Recommendation
Apply security updates for Windows Overlay Filter and restrict users from running untrusted applications.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-83879High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-83749High
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw may be exploited to gain higher privileges on the system.
- CVE-2026-83727High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69957High
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2026-69953High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.
- CVE-2026-69952High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2026-69950High
Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-69942High
Buffer over-read vulnerability in Windows Overlay Filter. An authorized attacker can exploit this flaw to execute code locally.
- CVE-2026-105004High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69373Medium
The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS