CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Little Orbit GFAC 驱动程序（GFACSysx64.sys）中的多个本地权限提升漏洞 | ---|--- CVE 编号| CVE-2026-12166、CVE-2026-12167、CVE-2026-12168 供应商| Little Orbit 产品| GamersFirst 反作弊（GFAC）驱动程序（GFACSysx64.sys） 受影响版本| 驱动二进制文件中未嵌入版本信息。分析样本：SHA-256 b6748d7da5759dee7d5f2f32b0326b4edb7b2135a0e4a6d5ff26aef1e139d8b2 漏洞类型|...

CVE-2026-12168

An improper validation vulnerability for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port...

CVE-2026-12168

An improper validation vulnerability for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port...

EUVD-2026-41377

A NULL pointer dereference vulnerability for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash...

CVE-2026-12167

The Little Orbit GFAC driver, specifically the GFAC_Sys_x64.sys file, contains an improper access control vulnerability (CWE-284) in its minifilter communication port. Due to a lack of sufficiently restrictive security descriptors, low-privileged local users can open a connection to this port to ...

CVE-2026-12167 CVE-2026-12167

The Minifilter communication port for driver GFACSysx64.sys in Little Orbit GFAC allows a local attacker to access privileged driver functionality via a communication interface that lacks appropriate access restrictions...