Security Advisory

CVE-2026-12168

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-02 14:36:27

Last updated 2026-07-02 17:36:23

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port.

← Browse all CVEs View on cve.org ↗