PoC Index

CVE-2026-12166

MEDIUM 5.5EPSS 0.2%

A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.15% chance of exploitation in the next 30 days, 5th percentile
Published
2026-07-02

Proof-of-concept exploits (1)

References

Related