Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CWE-126, CWE-190