CVE-2026-83879
7.0HighPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-362, CWE-416
Impact
A local attacker with standard user access can elevate privileges to SYSTEM. They need local credentials or existing code execution on the Windows host first.
Root cause
A race condition leading to a use-after-free in the Windows Overlay Filter driver allows improper memory access during concurrent operations.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update for Windows Overlay Filter as soon as the advisory specifies it; no interim mitigation or workaround is provided.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.