Local Privilege Escalation in WibuKey for Windows by Wibu-Systems
CVE-2026-81579

8.8HIGH

Key Information:

Vendor

Wibu-systems-ag

Status
Wibukey
Vendor
CVE Published:
27 August 2026

What is CVE-2026-81579?

An untrusted pointer dereference vulnerability exists in the WibuKey2_64.sys kernel driver for 64-bit Windows, affecting versions prior to 6.71. This flaw can be exploited by attackers to achieve local privilege escalation, enabling them to execute arbitrary code, gain an administrator shell, or take complete control of the affected system, compromising its integrity and security.

Affected Version(s)

wibukey 0 < 6.71

References

https://cdn.wibu.com/fileadmin/wibu_downloads/security_ad...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

김명규 working with Trend Micro Zero Day Initiative
.