Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CWE-125, CWE-190