Buffer Overflow Vulnerability in WibuKey Driver for Windows
CVE-2026-84854

7HIGH

Key Information:

Vendor

Wibu-systems-ag

Status
Wibukey
Vendor
CVE Published:
6 October 2026

What is CVE-2026-84854?

The WibuKey driver for Windows, specifically versions prior to 6.72, contains a vulnerability due to inadequate validation of user input during kernel buffer size calculations. This flaw can allow for small data writes beyond the confines of the intended kernel buffer, potentially leading to system crashes. In certain circumstances, this vulnerability may lead to unintended modifications of adjacent kernel memory, posing a significant risk to system stability and security. Users of affected versions should upgrade to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

wibukey 0 < 6.72

References

https://cdn.wibu.com/fileadmin/wibu_downloads/security_ad...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

정기현(haro001)
.