securitytabs

CVE-2026-84854

High7.0

In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.

CVSS
7.0v3.1
EPSS (exploit probability)
0.1%1th pct
CISA KEV
Not listed

EPSS trendFIRST daily scores, last 90 days

FIRST EPSS held steady from 0.1% on 2026-10-07 to 0.1% on 2026-10-22, ranging 0.1%–0.1% across 16 daily scores.
2026-10-07 → 2026-10-22 · 16 days · 0.1%–0.1%
Daily values
FIRST EPSS daily scores for this CVE
Score dateEPSSPercentile
2026-10-220.1%0.9%
2026-10-210.1%0.9%
2026-10-200.1%0.9%
2026-10-190.1%0.9%
2026-10-180.1%0.9%
2026-10-170.1%0.9%
2026-10-160.1%0.9%
2026-10-150.1%0.9%
2026-10-140.1%0.6%
2026-10-130.1%0.6%
2026-10-120.1%0.6%
2026-10-110.1%0.6%
2026-10-100.1%0.6%
2026-10-090.1%0.6%
2026-10-080.1%0.6%
2026-10-070.1%0.5%

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Coverage1 article

References

Facts sourced from NVD, FIRST EPSS, and CISA KEV. Last synced 2026-10-22 20:34 UTC.

  • CVSS & description: NVD 2.0, fetched 2026-10-22 19:34 UTC
  • EPSS: FIRST EPSS, fetched 2026-10-22 20:34 UTC; score date 2026-10-22
  • KEV: CISA KEV, fetched 2026-10-22 20:34 UTC