CVE-2026-83749
HighCVSS 7.0Summary
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw may be exploited to gain higher privileges on the system.
Risk Assessment
An attacker with valid credentials can locally elevate privileges, potentially resulting in system compromise. Windows systems using the overlay filter are at risk.
Recommendation
Apply Microsoft security updates for Windows Overlay Filter as soon as possible. It is also recommended to enforce the principle of least privilege for local accounts.
Other vulnerabilities in Windows Overlay Filter
See all- CVE-2026-83879High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-83727High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69959High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Exploitation requires local access to the system.
- CVE-2026-69957High
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2026-69953High
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Exploitation requires local access to the system.
- CVE-2026-69952High
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. The flaw requires local access to the system.
- CVE-2026-69373Medium
The vulnerability in Windows Overlay Filter is an integer overflow or wraparound. It allows an authorized attacker to elevate privileges locally.
- CVE-2026-69371High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69368High
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
- CVE-2026-69350Medium
A heap-based buffer overflow vulnerability in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS