CVE-2026-12168

HIGH 7.8

CVE-2026-12168

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

An improper validation vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to escalate privileges to SYSTEM and execute arbitrary code in kernel mode via crafted messages sent through a Minifilter communication port.

Vendor	little orbit
Product	gamefirst anti-cheat
Published	Jul 2, 2026
Last Updated	Jul 2, 2026

Stay Ahead of the Next One

Get instant alerts for little orbit gamefirst anti-cheat

Be the first to know when new high vulnerabilities affecting little orbit gamefirst anti-cheat are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Little Orbit / GameFirst Anti-Cheat

0 ≤ 2025-07-07

References

NVD ↗ CVE.org ↗ EPSS Data ↗

littleorbit.com: https://www.littleorbit.com/ kb.cert.org: https://kb.cert.org/vuls/id/639124 github.com: https://github.com/FzRsLLaSheR/CVE-2026-12166_CVE-2026-12167_CVE-2026-12168