CVE-2026-81581— User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.
Quick assessment
Affected
wibu-systems-ag wibukey
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WibuKey 64位版本（WibuKey 6.70 及更早版本）中的 WibuKey64.sys 驱动存在内存边界校验不当的漏洞。攻击者可以通过将指针设置到程序作用域之外来利用此漏洞。该漏洞通常会导致系统拒绝服务（DoS），但鉴于该驱动以系统权限运行，也不能排除其可能被利用以导致远程代码执行（RCE）和权限提升的可能性。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81581
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
User input in WibuKey is used (without proper sanitization) to compute the address of a pointer, which can be exploited to let the user point to any storage, to which Windows responds with a denial of service.
Source: CVE Program / CVE List V5
Vulnerability Description
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remote Code Execution and Privilege Escalation (since the driver runs with system privileges).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| wibu-systems-ag | wibukey | 0 ~ 6.71 | - |
|
II. Public POCs for CVE-2026-81581
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81581
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-81581 (1)
Same Patch Batch · wibu-systems-ag · 2026-08-27 · 7 CVEs total
| CVE-2026-81579 | 8.8 HIGH | An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivilege |
| CVE-2026-81573 | 8.6 HIGH | Improper Access Control in Local-Only Configuration Commands |
| CVE-2026-81574 | 8.2 HIGH | Format String Vulnerability in Logger |
| CVE-2026-81572 | 7.8 HIGH | Local Privilege Escalation in CodeMeter Runtime on Windows |
| CVE-2026-81576 | 7.7 HIGH | Improper Authentication of Session Handles |
| CVE-2026-81575 | 7.5 HIGH | Missing Sanity Checks for Buffer Lengths |
IV. Related Vulnerabilities
Same vendor: wibu-systems-ag
-
CVE-2026-81579
An untrusted Pointer Dereference can be exploited to escalat -
CVE-2026-81576
Improper Authentication of Session Handles -
CVE-2026-81575
Missing Sanity Checks for Buffer Lengths -
CVE-2026-81574
Format String Vulnerability in Logger -
CVE-2026-81573
Improper Access Control in Local-Only Configuration Commands
Same weakness: CWE-119
-
CVE-2026-79069
Chrome 152.0.7977.65前Tint内存损坏漏洞 -
CVE-2022-50999
Nokogiri before 1.13.5 Integer Overflow via libxml2 -
CVE-2021-47996
Nokogiri before 1.11.4 Multiple Vulnerabilities via libxml2 -
CVE-2026-55586
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX -
CVE-2026-18294
OriginLab Origin Viewer OGW File Parsing Memory Corruption R
V. Comments for CVE-2026-81581
No comments yet