A buffer over‑read in the Windows Overlay Filter allows a locally logged‑on user to read memory beyond the intended buffer, which can expose sensitive data from the kernel or other processes.

The vulnerability affects multiple Microsoft Windows operating systems, including Windows 10 from version 1607 through 22H2, Windows 11 from 23H2 to 26H2, and Windows Server editions from 2012 through 2025. All 32‑bit and 64‑bit builds listed in the CNA product list are affected.

The CVSS v3.1 score is 5.5, classifying it as moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the flaw requires local code execution, only a user with local access could exploit it; there is no known network or elevation vector. Organizations with privileged users on affected systems therefore face a moderate risk of data leakage, and patching is the primary mitigative action.