Local Privilege Escalation in Little Orbit GFAC Driver

CVE-2026-12167

What is CVE-2026-12167?

The GFAC_Sys_x64.sys driver from Little Orbit contains a critical flaw in its Minifilter communication port, allowing local attackers to access privileged functionalities through an inadequate communication interface. This lack of proper access restrictions could enable malicious actors to perform unauthorized actions, compromising system integrity and security. Users of the affected driver should take immediate measures to secure their systems and stay informed about potential patches or updates.

References