VDB
CVE-2026-84854
CVE-2026-84854
PUBLISHED
CVSS 7 HIGH
Reported by wibu · Published October 6, 2026
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wibu-systems-ag | wibukey | 0 |
| wibu-systems-ag | wibukey | 0, 0 |
| wibu-systems-ag | wibukey | 0, 0 |
Timeline
- Oct 6, 2026 Coalition ESS Score
- Oct 6, 2026 CVE Published
- Oct 7, 2026 EPSS Score
- Oct 7, 2026 CVE Updated