Memory Boundary Validation Flaw in WibuKey Driver for Windows
CVE-2026-81581

8.8HIGH

Key Information:

Vendor

Wibu-systems-ag

Status
Wibukey
Vendor
CVE Published:
27 August 2026

What is CVE-2026-81581?

The WibuKey driver, specifically WibuKey64.sys, contains a vulnerability due to improper validation of memory boundaries. This flaw allows attackers to manipulate pointers outside of designated scopes, potentially leading to unauthorized access. While commonly resulting in denial of service conditions, this vulnerability also opens pathways for more severe exploitations, including remote code execution and privilege escalation, as the driver operates with elevated system privileges. Users are advised to review the vendor's advisory for mitigation recommendations.

Affected Version(s)

wibukey 0 < 6.71

References

https://cdn.wibu.com/fileadmin/wibu_downloads/security_ad...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

KEUM SUNG from Team_F1_Driver
.