Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.