{"id":"CVE-2026-84854","aliases":["EUVD-2026-93359","GHSA-pc55-w49m-q7wf"],"status":"published","title":"Out of Bound Write on WibuKey for Windows","description":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00105,"percentile":0.01053,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2026-10-06T09:59:33Z","modified":"2026-10-15T03:36:26Z","products":[{"vendor":"siemens","product":"pss(r)sincal v21.5"},{"vendor":"siemens","product":"pss(r)sincal v22.0"},{"vendor":"siemens","product":"pss(r)sincal v22.5"},{"vendor":"wibu-systems-ag","product":"wibukey"}],"references":[{"url":"https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-100065.pdf","tags":["vendor-advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-148322.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84854"},{"url":"https://github.com/advisories/GHSA-pc55-w49m-q7wf"}],"sources":{"cve":[{"id":"CVE-2026-84854","title":"Out of Bound Write on WibuKey for Windows","description":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.","status":"published","published":"2026-10-06T09:59:33.393Z","modified":"2026-10-15T01:24:02.611Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:20:08.734143Z"}],"euvd":[{"id":"EUVD-2026-93359","description":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.","status":"published","published":"2026-10-06T09:59:33Z","modified":"2026-10-15T01:24:02Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:05.308844Z"}],"ghsa":[{"id":"GHSA-pc55-w49m-q7wf","title":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when...","description":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.","status":"published","published":"2026-10-06T12:30:30Z","modified":"2026-10-15T03:36:26Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:34.67317Z"}],"nvd":[{"id":"CVE-2026-84854","description":"In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be written outside the intended kernel buffer. This can lead to a system crash. Under unfavorable circumstances, adjacent kernel memory may be modified.","status":"published","published":"2026-10-06T10:16:54.23Z","modified":"2026-10-15T02:20:16.87Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:54.486849Z"}]}}