CVE-2026-84854: Out of Bound Write on WibuKey for Windows
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs local access and low privileges on a Windows system with an affected WibuKey driver installed. The provided vector indicates no user interaction is required.
Which driver versions are affected?
WibuKey driver for Windows versions below 6.72 are affected. The data does not state whether any particular installation or configuration enables or disables exposure.
What is the likely impact of successful exploitation?
The issue can cause a system crash because data may be written outside an intended kernel buffer. In unfavorable circumstances, adjacent kernel memory may be modified, affecting confidentiality, integrity, and availability.