The CVE-2026-81581 vulnerability is caused by improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows. This can be exploited by an attacker to set pointers outside the scope of the program, potentially leading to denial of service, Remote Code Execution, and Privilege Escalation. System administrators and users of WibuKey up to 6.70 for Windows should be aware of this v [truncated]
The WibuKey for Windows before version 6.71 is vulnerable due to an untrusted pointer dereference in the WibuKey2_64.sys kernel driver. This allows for local privilege escalation, enabling an attacker to execute arbitrary code, run an administrator shell, or gain full control over the system. System administrators and security teams should review and apply the vendor-provided patch or upgrade to version 6 [truncated]
The CVE-2026-81576 vulnerability affects CodeMeter Runtime when configured as a server, specifically before versions 8.41a and 9.10. It involves a cryptographically weak SID used as the sole authenticator, allowing potential brute-force attacks to recover session handle numbers and read license information belonging to other handles. Organizations should be aware of this vulnerability and take steps to mi [truncated]
The CodeMeter Runtime, specifically versions 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, contains a local privilege escalation vulnerability. This issue arises from the creation of a predictable temporary file under C:CM-Stick, where directory and file paths are not properly checked for NTFS reparse points, such as junctions or symbolic links, before file operations are performed. A local atta [truncated]
