CVE-2026-28572

CVE-2026-28572 is an elevation of privilege vulnerability in the Android Framework component, specifically in the onCreate method of InstallLaunch.kt. A tapjacking/overlay attack can produce a misleading UI, enabling a local attacker to escalate privileges with no additional execution privileges ...

EUVD-2026-73515

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network...

CVE-2026-69474

This vulnerability is a use after free in Windows Overlay Filter that allows an authorized attacker to disclose information over a network. The CVSS 3.1 base score is 4.8 (MEDIUM) , requiring network access, high complexity, low privileges, and user interaction, with a high impact on confidential...

CVE-2026-69373

CVE-2026-69373 is an integer overflow or wraparound in the Windows Overlay Filter component that allows an authorized attacker to achieve local privilege escalation . The vulnerability requires high privileges and local access (CVSS 3.1: 6.7 MEDIUM — AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). No publi...

EUVD-2026-73480

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69350

CVE-2026-69350 is a heap-based buffer overflow in Windows Overlay Filter that allows an authorized attacker to elevate privileges locally . The vulnerability requires high privileges and no user interaction, with a CVSS 3.1 score of 6.7 (MEDIUM) reflecting high impact to confidentiality, integrit...

EUVD-2026-73468

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

EUVD-2026-73464

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-69343

CVE-2026-69343 is an out-of-bounds read in the Windows Overlay Filter component that allows a low-privilege local attacker to achieve information disclosure without user interaction. The vulnerability is rated CVSS 5.5 (MEDIUM) with a vector of local attack, low complexity, and high confidentiali...

EUVD-2026-73452

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-69316

CVE-2026-69316 is a buffer over-read vulnerability in the Windows Overlay Filter component. An authorized local attacker with low privileges can exploit it to disclose sensitive information . The attack requires high complexity and no user interaction, with a CVSS v3.1 base score of 4.7 (MEDIUM) ...

CVE-2026-69371

A heap-based buffer overflow in Windows Overlay Filter allows an authorized, low-privileged attacker to elevate privileges over a network , with user interaction required and high impact to confidentiality, integrity, and availability (CVSS 8.0 HIGH ). CISA's SSVC assessment indicates no known ex...

EUVD-2026-73235

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...

CVE-2026-69368

CVE-2026-69368 is a heap-based buffer overflow in the Windows Overlay Filter component that allows an authorized attacker with local access and low privileges to escalate their privileges. The vulnerability carries a CVSS 3.1 base score of 7.8 (HIGH) with high impact to confidentiality, integrity...

EUVD-2026-73234

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

PT-2026-88225

In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-61699

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host from a Nebula mesh. Because the blocklist never reaches any peer's config.yml, a Blocked host retains full overlay...