Out of Bound Write on WibuKey for Windows

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 6, 2026 · NIST NVD

   Detected

   In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

2. Oct 15, 2026 · NIST NVD

   Updated

   In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

Affected

• vendor wibu-systems-ag wibukeyversion unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-84854

  In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumst

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-84854

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-84854

  30-day exploitation probability 0.1%

  first.org
• NIST NVDVulnerability recordCVE-2026-84854

  In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumst

  nvd.nist.gov

References

• Reference · cdn.wibu.com
• Reference · cert-portal.siemens.com