CVE-2026-81579: An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WibuKey for Windowsto a version that resolves this vulnerability.Fixed in 6.71 - Compensating control
Mitigate local privilege escalation risk by restricting unprivileged users’ ability to interact with or load/trigger the WibuKey2_64.sys kernel driver on Windows until the system is upgraded to version 6.71.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running WibuKey for Windows with a version earlier than 6.71 on 64-bit Windows are exposed. The affected component is the WibuKey2_64.sys kernel driver.
What access does an attacker need to exploit it?
An attacker needs local access and low-level privileges on the Windows system. No user interaction is required.
What could an attacker achieve after exploitation?
The vulnerability provides a write-what-where primitive that can be used for local privilege escalation. An attacker could execute arbitrary code, obtain an administrator shell, or gain full control of the system.
What version addresses the issue?
Upgrade WibuKey for Windows to version 6.71 or later. Versions before 6.71 are affected.