CVE-2026-80112highCWE-732

CVE-2026-80112: fallo de gravedad alta en PassMark Software PerformanceTest

PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear BurnInTest+ Monitorear OSForensics

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

41Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 8.5epss 0.1%
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening a handle to the device object created without a security descriptor. Attackers can issue IOCTLs through the permissive default Windows ACL applied to the device to access restricted hardware operations regardless of privilege or integrity level.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
PassMark Software · BurnInTestPassMark Software · OSForensicsPassMark Software · PerformanceTest
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — PassMark Software PerformanceTest

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-80114HIGHPassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sysEPSS 0.2%CVE-2026-80119HIGHPassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTLEPSS 0.2%CVE-2026-80116HIGHPassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTLEPSS 0.2%CVE-2026-80118HIGHPassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTLEPSS 0.2%CVE-2026-80117MEDIUMPassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sysEPSS 0.2%CVE-2026-80113MEDIUMPassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTLEPSS 0.2%