CVE-2026-81579
High · 8.8CVSS
8.8
EPSS
0.2%
Published
Aug 27, 2026
CISA due date
—
The record
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-20469 In trusted_mem, there is a possible escalation of privilege due to improper input… CWE-123
- CVE-2026-45257 The KTLS receive path decrypted each record in place, assuming that the mbufs holding… CWE-123
- GHSA-g6pc-6676-c23j Remotion: arbitrary file write vulnerability CWE-123
- CVE-2026-30121 remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write… CWE-123
- CVE-2026-43284 In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid… CWE-123
- CVE-2026-41952 Local privilege escalation due to improper input validation. CWE-123
- CVE-2025-14857 An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers… CWE-123
- CVE-2025-69809 A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated… CWE-123