Executive brief
Windows Overlay Filter is a core Windows component responsible for managing visual overlays and layered windows in the operating system. A heap-based buffer overflow flaw allows an authorized local user to overflow memory and execute code with elevated privileges, potentially compromising system integrity and allowing full control of the affected machine.
Technical details
A heap-based buffer overflow vulnerability exists in Windows Overlay Filter that can be triggered by an authenticated attacker with local access. The flaw results from insufficient bounds checking when processing overlay data, allowing an attacker to overflow heap memory and overwrite adjacent objects. Exploitation requires local access and appropriate privileges but does not require user interaction. A successful exploit enables privilege escalation to system level, granting the attacker complete control of the affected Windows system. Microsoft has released patches to address this vulnerability.
Affected products
- Microsoft Windows multiple versions
Timeline
- 2026-09-08: disclosed