Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-80112PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys

High 7.8

In plain English

A high-severity incorrect permission assignment in BurnInTest from PassMark Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)7.8High

Exploit odds (30 days)0.1%top 95.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening a handle to the device object created without a security descriptor. Attackers can issue IOCTLs through the permissive default Windows ACL applied to the device to access restricted hardware operations regardless of privilege or integrity level.

Affected products (as reported)

Vendor	Product	Versions
PassMark Software	PerformanceTest	0 – before 11.1 build 1012
PassMark Software	BurnInTest	0 – before 11.1 build 1000
PassMark Software	OSForensics	0 – before 11.1 build 1016

Weakness: CWE-732 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Researcher Disclosure technical-description, exploit
PerformanceTest Changelog release-notes, patch
BurnInTest Changelog release-notes, patch
OSForensics Changelog release-notes, patch
Technical Analysis and Decompiled Evidence technical-description
https://www.vulncheck.com/advisories/passmark-performancetest-burnintest-and-osforensics-improper-access-control-via-directio64-sys third-party-advisory