Executive brief
Windows Overlay Filter is a system component that manages visual overlays in the Windows operating system. An authorized attacker with local access could exploit an out-of-bounds read vulnerability to access sensitive information stored in system memory, potentially exposing credentials, encryption keys, or other confidential data.
Technical details
This vulnerability is an out-of-bounds read in the Windows Overlay Filter component, allowing an authenticated local attacker to read memory beyond intended buffer boundaries. The attack requires local access and valid credentials on the target system. By exploiting this memory access flaw, an attacker can disclose sensitive information from kernel or process memory. The vulnerability is classified as medium severity with a CVSS score of 5.5, indicating moderate impact on confidentiality. A patch from Microsoft is expected to be available through the standard Windows Update process.
Affected products
- Microsoft Windows Overlay Filter
Timeline
- 2026-09-08: disclosed