CVE-2026-12167
Received Received - Intake

GFAC Driver Privilege Escalation via Unprotected Port

Publication date: 2026-07-02

Last updated on: 2026-07-02

Assigner: CERT/CC

Description
The Minifilter communication port for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to access privileged driver functionality via a communication interface that lacks appropriate access restrictions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-02
Last Modified
2026-07-02
Generated
2026-07-02
AI Q&A
2026-07-02
EPSS Evaluated
N/A
NVD
CVE-2026-12167
EUVD
EUVD-2026-41376

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Minifilter communication port for the driver GFAC_Sys_x64.sys in Little Orbit GFAC. It allows a local attacker to access privileged driver functionality through a communication interface that does not have proper access restrictions.

Impact Analysis

Because the vulnerability allows a local attacker to access privileged driver functionality, it could lead to unauthorized actions at the driver level, potentially compromising system security or stability.

Mitigation Strategies

Since the vendor has not provided a patch, users are advised to restrict local access to trusted individuals.

It is recommended to disable or remove GFAC-dependent games until an update is available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12167. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart