Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-81579

An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

Description

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wibu-systems-ag wibukey

Default version status: unaffected

  • 0 to < 6.71affected

References