Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-84854 1 Wibu-systems-ag 1 Wibukey 2026-10-06 7 High
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.
CVE-2026-81579 1 Wibu-systems-ag 1 Wibukey 2026-08-27 8.8 High
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.
CVE-2026-81581 1 Wibu-systems-ag 1 Wibukey 2026-08-27 8.8 High
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remote Code Execution and Privilege Escalation (since the driver runs with system privileges).