CVE-2026-81581: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer in wibu-systems-ag wibukey

The vulnerability CVE-2026-81581 in WibuKey64.sys of WibuKey up to version 6.70 for Windows is caused by improper restriction of operations within the bounds of a memory buffer (CWE-119). An attacker can exploit this by manipulating pointers to reference memory outside the valid range, which may result in denial of service. Given that the driver operates with system-level privileges, exploitation could also lead to remote code execution or privilege escalation. The CVSS v3.1 base score is 8.8, indicating high severity with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can cause denial of service and may allow remote code execution or privilege escalation due to the driver running with system privileges. This could compromise system confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to the WibuKey driver.