TLDRVuln - Cybersecurity Vulnerabilities Made Simple

CVE-2026-12166

Medium · published July 2, 2026

CVSS v3.1

5.5

EPSS

Percentile

4.0

In the wild

Unconfirmed

What it is

A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00152 · 4.0th percentile
Published: 2026-07-02T14:36Z

EPSS history

Timeline

02 JUL 14:36Z
CVE-2026-12166
cvelistv5