Vulnerability · Published Aug 27, 2026 · Assigned by wibu
CVE-2026-81579An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
High 8.8
In plain English
A high-severity security flaw in wibukey from wibu-systems-ag. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 94.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey2_64.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrator shell, or gain full control over the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| wibu-systems-ag | wibukey | 0 – before 6.71 |
Weakness: CWE-123 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H