Vulnerability · Published Jun 1, 2026 · Assigned by certcc
CVE-2026-8501CVE-2026-8501
High 7.8
In plain English
A high-severity security flaw in PC Tools Internet Security from Symantec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Symantec | PC Tools Internet Security | * |
Weakness: CWE-782 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules
- https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
- https://kb.cert.org/vuls/id/158530
- https://www.kb.cert.org/vuls/id/158530