{"id":"CVE-2026-112750","kind":"vulnerability","aliases":["CVE-2026-112750"],"related":[],"title":"Windows Overlay Filter: numeric truncation lets a local user read data","description":"Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally.","summary":"A numeric truncation error in the Windows Overlay Filter lets an authorized local attacker disclose information. The sources give no further detail about what data is exposed.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:35+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","triaged_at":"2026-11-10T20:02:11+00:00","updated_at":"2026-11-10T20:02:11+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T20:02:11Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Windows Overlay Filter: numeric truncation lets a local user read data","impact":"low","summary":"A numeric truncation error in the Windows Overlay Filter lets an authorized local attacker disclose information. The sources give no further detail about what data is exposed.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user reads information they should not see","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-112750 to confirm affected Windows builds and the fixed update.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows systems with the Overlay Filter component are the affected surface, according to the description. The sources do not say which Windows versions or configurations are vulnerable, and an attacker must already have local authorized access. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000644,"input_tokens":4487,"output_tokens":391,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112750':14A,17A '-2026':13A,16A 'allow':54C 'attack':33B,57C 'author':31B,56C 'cve':12A,15A 'data':11A,44B 'detail':41B 'disclos':34B,59C 'error':23B,49C 'expos':46B 'filter':3A,28B,53C 'give':38B 'inform':35B,60C 'infrastructur':18B 'let':6A,29B 'local':8A,32B,61C 'numer':4A,21B,47C 'overlay':2A,27B,52C 'read':10A 'sourc':37B 'truncat':5A,22B,48C 'user':9A 'window':1A,19B,26B,51C","nicknames":[],"mitigations":[],"who_affected":"Windows systems with the Overlay Filter component are the affected surface, according to the description. The sources do not say which Windows versions or configurations are vulnerable, and an attacker must already have local authorized access. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-112750':14A,17A '-2026':13A,16A 'cve':12A,15A 'data':11A 'filter':3A 'let':6A 'local':8A 'numer':4A 'overlay':2A 'read':10A 'truncat':5A 'user':9A 'window':1A","search_b":"'attack':33B 'author':31B 'data':44B 'detail':41B 'disclos':34B 'error':23B 'expos':46B 'filter':28B 'give':38B 'inform':35B 'infrastructur':18B 'let':29B 'local':32B 'numer':21B 'overlay':27B 'sourc':37B 'truncat':22B 'window':19B,26B","search_c":"'allow':54C 'attack':57C 'author':56C 'disclos':59C 'error':49C 'filter':53C 'inform':60C 'local':61C 'numer':47C 'overlay':52C 'truncat':48C 'window':51C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112750","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112750","severity":null,"published_at":"2026-11-10T19:18:35+00:00","modified_at":"2026-11-10T19:18:35+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","fetched_at":"2026-11-10T19:24:31+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}