Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.
CWE-862