CVE-2026-81581: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in wibu-systems-ag wibukey

The vulnerability CVE-2026-81581 in WibuKey64.sys of WibuKey up to 6.70 for Windows is caused by improper restriction of operations within the bounds of a memory buffer (CWE-119). An attacker can exploit this by manipulating pointers outside the program's memory scope. While denial of service is the typical outcome, the elevated privileges of the driver mean remote code execution and privilege escalation cannot be ruled out. The CVSS 3.1 score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Exploitation can result in denial of service, remote code execution, and privilege escalation on affected systems. The driver operates with system privileges, increasing the severity of potential impacts. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting access to the vulnerable driver and monitoring for suspicious activity related to WibuKey64.sys.