CVE-2026-81581: User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remote Code Execution and Privilege Escalation (since the driver runs with system privileges).
Affected Software
Event History
Frequently Asked Questions
Which systems are in scope?
Windows systems using WibuKey or the WibuKey64.sys driver are affected through WibuKey version 6.70. The provided data does not identify any affected non-Windows platforms.
What level of access does an attacker need?
Exploitation requires local access and low privileges. No user interaction is required.
What could exploitation achieve?
The expected outcome is a Windows denial of service caused by pointers being set outside the program’s memory scope. Because the driver runs with system privileges, remote code execution and privilege escalation cannot be ruled out.