Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-12168

CVE-2026-12168

Description

An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Little Orbit GameFirst Anti-Cheat

  • 0 to ≤ 2025-07-07affected

References