CVE-2026-84290 — Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection

CVE-2026-84290

Security vulnerability affects the Windows S-TAP component as part of IBM Guardium Data Protection PUBLISHED

Description (CNA)

IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers dereference user-controlled pointers without adequate probing and exception handling, potentially allowing a privileged local attacker to cause a system crash or perform limited kernel-memory reads.

Affected (CNA)

Vendor / product	Versions
IBM / Guardium Data Protection	affected 12.0; affected 12.1; affected 12.2

CWE

CWE-119

References

https://www.ibm.com/support/pages/node/7291676

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.