Windows Overlay Filter Out-of-Bounds Read

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Microsoft Corporation

Description

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-09

AI Q&A

2026-09-09

EPSS Evaluated

N/A

NVD

CVE-2026-69343

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in the Windows Overlay Filter. It allows an authorized attacker with local access to read memory outside the intended bounds, potentially disclosing sensitive information.

Impact Analysis

An attacker could exploit this to access sensitive data on your system, such as passwords or personal files, if they already have local access. The impact is limited to information disclosure.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft to patch the Overlay Filter vulnerability. Monitor Microsoft's security advisories for updates and disable unnecessary services if affected components are identified.

Hi! I’m here to help you understand CVE-2026-69343. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70