IM
IronMonkey Threat Research

CVE-2026-84854 HIGH

Published: 2026-10-06 | Last Modified: 2026-10-07 | Status: Deferred

Description

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

CVSS Metrics

Base Score: 7.0 (HIGH)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: 2fc02b1f-71e7-4514-a878-169626f68903

Type: Secondary

Exploitability Score: 1.0

Impact Score: 5.9

Weaknesses

Source Type Description
2fc02b1f-71e7-4514-a878-169626f68903 Secondary
en CWE-787