{"id":"CVE-2026-112813","kind":"vulnerability","aliases":["CVE-2026-112813"],"related":[],"title":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay…","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.","summary":null,"severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:46+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:25+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-112813':16A,19A '-2026':15A,18A 'allow':34C 'attack':37C 'author':36C 'concurr':1A,20C 'condit':10A,29C 'cve':14A,17A 'elev':39C 'execut':2A,21C 'filter':33C 'improp':7A,26C 'local':41C 'overlay':13A,32C 'privileg':40C 'race':9A,28C 'resourc':5A,24C 'share':4A,23C 'synchron':8A,27C 'use':3A,22C 'window':12A,31C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium"],"campaign_type":null,"search_a":"'-112813':16A,19A '-2026':15A,18A 'concurr':1A 'condit':10A 'cve':14A,17A 'execut':2A 'improp':7A 'overlay':13A 'race':9A 'resourc':5A 'share':4A 'synchron':8A 'use':3A 'window':12A","search_b":"","search_c":"'allow':34C 'attack':37C 'author':36C 'concurr':20C 'condit':29C 'elev':39C 'execut':21C 'filter':33C 'improp':26C 'local':41C 'overlay':32C 'privileg':40C 'race':28C 'resourc':24C 'share':23C 'synchron':27C 'use':22C 'window':31C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112813","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112813","severity":null,"published_at":"2026-11-10T19:18:46+00:00","modified_at":"2026-11-10T19:18:46+00:00","first_seen_at":"2026-11-10T19:24:34+00:00","fetched_at":"2026-11-10T19:24:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}