CVE-2026-80112— PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys
Quick assessment
Affected
PassMark Software PerformanceTest
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PassMark Software PerformanceTest是PassMark Software公司的一款电脑性能测试软件。 PassMark Software PerformanceTest 11.1 build 1012之前版本、PassMark Software BurnInTest 11.1 build 1000之前版本和PassMark Software OSForensics 11.1 build 1016之前版本存在权限许可和访问控制问题漏洞，该漏洞源于DirectIo64.sys内核
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PassMark Software | BurnInTest | < 11.1 build 1000 |
affected |
| PassMark Software | OSForensics | < 11.1 build 1016 |
affected |
| PassMark Software | PerformanceTest | < 11.1 build 1012 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-80112
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys
Source: CVE Program / CVE List V5
Vulnerability Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening a handle to the device object created without a security descriptor. Attackers can issue IOCTLs through the permissive default Windows ACL applied to the device to access restricted hardware operations regardless of privilege or integrity level.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键资源的不正确权限授予
Source: CVE Program / CVE List V5
Vulnerability Title
PassMark Software PerformanceTest 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PassMark Software PerformanceTest是PassMark Software公司的一款电脑性能测试软件。 PassMark Software PerformanceTest 11.1 build 1012之前版本、PassMark Software BurnInTest 11.1 build 1000之前版本和PassMark Software OSForensics 11.1 build 1016之前版本存在权限许可和访问控制问题漏洞，该漏洞源于DirectIo64.sys内核
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PassMark Software | PerformanceTest | 0 ~ 11.1 build 1012 | - |
|
| PassMark Software | BurnInTest | 0 ~ 11.1 build 1000 | - |
|
| PassMark Software | OSForensics | 0 ~ 11.1 build 1016 | - |
|
II. Public POCs for CVE-2026-80112
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-80112
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-80112 (1)
Proof of Concept for CVE-2026-80112 (1)
-
🔗 GitHub - floppywiggler/directio64-disclosure · GitHub Read full article technical-description exploit
Security Blog Posts for CVE-2026-80112 (1)
Vendor Pages for CVE-2026-80112 (2)
Same Patch Batch · PassMark Software · 2026-09-04 · 8 CVEs total
| CVE-2026-80116 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64. |
| CVE-2026-80114 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authenticatio |
| CVE-2026-80119 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via Direc |
| CVE-2026-80113 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.s |
| CVE-2026-80117 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via Direct |
| CVE-2026-80118 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via |
| CVE-2026-80115 | 6.1 MEDIUM | PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR |
IV. Related Vulnerabilities
Same product: PerformanceTest
-
CVE-2026-80119
PassMark PerformanceTest, BurnInTest, and OSForensics Physic -
CVE-2026-80118
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80117
PassMark PerformanceTest, BurnInTest, and OSForensics Arbitr -
CVE-2026-80116
PassMark PerformanceTest, BurnInTest, and OSForensics Privil -
CVE-2026-80115
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel
Same vendor: PassMark Software
-
CVE-2026-80119
PassMark PerformanceTest, BurnInTest, and OSForensics Physic -
CVE-2026-80118
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80117
PassMark PerformanceTest, BurnInTest, and OSForensics Arbitr -
CVE-2026-80116
PassMark PerformanceTest, BurnInTest, and OSForensics Privil -
CVE-2026-80115
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel
Same weakness: CWE-732
-
CVE-2026-93640
Zimbra Collaboration Suite Local Privilege Escalation via Un -
CVE-2026-50057
Zimbra Collaboration Suite Local Privilege Escalation via Un -
CVE-2025-30054
Local Privilege Escalation in CGM CLININET -
CVE-2025-30051
Insecure File Permissions in CGM CLININET -
CVE-2026-111184
NoMachine Named Pipe Incorrect Permission Assignment Local P
V. Comments for CVE-2026-80112
No comments yet