CVE-2026-12167

HighCVSS 7.8/10Last modified Oct 25, 2026

Description

The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to access privileged driver functionality via a communication interface that lacks appropriate access restrictions.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
Little OrbitGameFirst Anti-Cheat<= 2025-07-07

References

Timeline

Published
Jul 2, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1216707.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized aCVE-2026-1216717.0Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.CVE-2026-1216737.8Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.CVE-2026-1216746.1Insertion of sensitive information into sent data in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over CVE-2026-1216756.1Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over aCVE-2026-1216776.5Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-1216785.3Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.CVE-2026-121687.8An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYCVE-2026-1216807.5Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a networCVE-2026-1216817.8Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.CVE-2026-1216839.4Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitraCVE-2026-1216859.8FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. These include fleet‑wide
CVE-2026-12167: High severity, CVSS 7.8 | Vulnix