PULSE
ES
FEED
ransomthegentlemen reclama a First Dental · US · Healthcareransomthegentlemen reclama a Angeles Contractor · MX · Manufacturingransomthegentlemen reclama a SK Capital Partners · US · Financial Servicesransomthegentlemen reclama a Cherry Bekaert · US · Professional Servicesransomthegentlemen reclama a GIO Dental · SL · Healthcareransomthegentlemen reclama a CommTank · SG · Technologyransomthegentlemen reclama a Ined · FR · Government & Defenseransomthegentlemen reclama a NOVADATA · AR · Technologyransomthegentlemen reclama a Bi Link · SGransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Servicesransomthegentlemen reclama a First Dental · US · Healthcareransomthegentlemen reclama a Angeles Contractor · MX · Manufacturingransomthegentlemen reclama a SK Capital Partners · US · Financial Servicesransomthegentlemen reclama a Cherry Bekaert · US · Professional Servicesransomthegentlemen reclama a GIO Dental · SL · Healthcareransomthegentlemen reclama a CommTank · SG · Technologyransomthegentlemen reclama a Ined · FR · Government & Defenseransomthegentlemen reclama a NOVADATA · AR · Technologyransomthegentlemen reclama a Bi Link · SGransomscarlettgroup reclama a spencers.com · US · Retail & E-Commerceransomincransom reclama a chicagolawyer.com · US · Professional Servicesransomeverstake reclama a sp*****g.comransomsilentransomgroup reclama a ArentFox Schiff · US · Professional Servicesransomemperador reclama a Studio Stelitano e Associati · IT · Professional Services
← All CVEs
CVE WatchOct 25, 2026

CVE-2026-12166

A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of ser

CVSS

5.5

Medium

EPSS

0.2%

p4

KEV

—

Exploit Today

1

0-100

Published: Jul 2, 2026 · Last modified: Oct 25, 2026

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-10-022026-10-30
Technical description

A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash.

Official references
Related CVEs

No related CVEs by CWE or product.