CVE-2026-84854 is a high-severity vulnerability in the WibuKey driver for Windows versions prior to 6.72. It involves an out-of-bounds write caused by insufficient validation of user input when calculating the size of a kernel buffer. This flaw can lead to system crashes and, in some cases, modification of adjacent kernel memory.
CVE-2026-81581 is a high-severity vulnerability in the WibuKey64.sys driver of WibuKey up to version 6.70 for Windows. It involves improper validation of memory boundaries, allowing an attacker to set pointers outside the intended scope. This flaw can lead to denial of service and potentially remote code execution or privilege escalation due to the driver running with system privileges. No patch or official remediation has been confirmed yet.
CVE-2026-81579 is a high-severity vulnerability in WibuKey for Windows before version 6.71. It involves an untrusted pointer dereference in the WibuKey2_64.sys kernel driver on 64-bit Windows, leading to a write-what-where condition. This flaw allows a local attacker to escalate privileges to administrator level, potentially executing arbitrary code or gaining full system control.
CVE-2026-81576 is a high-severity authorization bypass vulnerability in Wibu-Systems-AG CodeMeter Runtime configured as a server. Versions before 8.41a and 9.10 use a cryptographically weak SID as the sole authenticator per connection. An attacker with low privileges can brute-force the SID, recover another session's handle number, and read license information belonging to that session.
CVE-2026-81575 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime versions 8.00 and 9.00. When configured as a server, the affected versions accept requests with opcode 0x5e containing a data length and data. Due to missing bounds checking on the data length, out-of-bounds reads can occur, leading to a segmentation fault and crashing the runtime.
CVE-2026-81574 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime before versions 8.41a and 9.10. The logger component does not sanitize input strings properly, allowing attackers to inject printf-style format specifiers. This can cause the application to crash and potentially disclose sensitive information such as process memory and stack canaries. The vulnerability can be exploited locally by setting proxy values and remotely when combined with another vulnerability (CVE-2026-81573).
CVE-2026-81573 is a high-severity vulnerability in Wibu-Systems-AG CodeMeter Runtime versions before 8.41a or 9.10 when configured as a server. The configuration command handler fails to enforce network-origin restrictions, allowing remote attackers to execute commands intended only for local or same-network clients. This can lead to unauthorized reading of sensitive configuration data and overwriting values in Server.ini, including the hash of credentials for the CodeMeter WebAdmin, potentially enabling WebAdmin takeover.
CodeMeter Runtime versions 8.40 up to but not including 8.41a and 9.00 up to but not including 9.10 contain a vulnerability where the cmu.exe process creates a predictable temporary file under C:\CM-Stick without properly checking for NTFS reparse points such as junctions or symbolic links. This improper link resolution can allow a local attacker to create a junction pointing to an arbitrary system path, potentially causing deletion of arbitrary files with System privileges and enabling local privilege escalation.