Skip to content
OpenAdvisories
High · 8.8 CVE-2026-81579 EUVD-2026-66984GHSA-gqq4-6ppr-52p5

An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by wibu

Description

In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.

Affected products

VendorProductAffectedFixed
wibu-systems-ag wibukey < 6.71 6.71

References