Vulnerability · Published Sep 4, 2026 · Assigned by VulnCheck

CVE-2026-80117PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys

High 7.1

In plain English

A high-severity security flaw in BurnInTest from PassMark Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High

Exploit odds (30 days)0.2%top 94.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any x86 I/O port due to missing allowlist or port validation on exposed IOCTLs. Attackers can obtain a device handle and write to sensitive ports including the PS/2 controller port, CPU reset ports, CMOS configuration ports, and interrupt controller ports to cause an immediate system reset or other hardware-level manipulation from a standard user account.

Affected products (as reported)

Vendor	Product	Versions
PassMark Software	PerformanceTest	0 – before 11.1 build 1012
PassMark Software	BurnInTest	0 – before 11.1 build 1000
PassMark Software	OSForensics	0 – before 11.1 build 1016

Weakness: CWE-782 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References

Researcher Disclosure technical-description
PerformanceTest Changelog release-notes, patch
BurnInTest Changelog release-notes, patch
OSForensics Changelog release-notes, patch
Technical Analysis and Decompiled Evidence technical-description
https://www.vulncheck.com/advisories/passmark-performancetest-burnintest-and-osforensics-arbitrary-i-o-port-access-via-directio64-sys third-party-advisory