Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026
CVE-2026-12168
CVE-2026-12168
Description
An improper validation vulnerability for driver GFAC_Sys_x64.sys in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port.
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.