CVE-2026-80116— PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
Quick assessment
Affected
PassMark Software PerformanceTest
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PassMark Software PerformanceTest是PassMark Software公司的一款电脑性能测试软件。 PassMark Software PerformanceTest 11.1 build 1012之前版本、BurnInTest 11.1 build 1000之前版本和OSForensics 11.1 build 1016之前版本存在权限许可和访问控制问题漏洞，该漏洞源于DirectIo64.sys中暴露的IOCTL未对设备选择、寄存器偏移或值进行验证，导致权限提升，本地用
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| PassMark Software | BurnInTest | < 11.1 build 1000 |
affected |
| PassMark Software | OSForensics | < 11.1 build 1016 |
affected |
| PassMark Software | PerformanceTest | < 11.1 build 1012 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-80116
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
Source: CVE Program / CVE List V5
Vulnerability Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to modify hardware configuration by exploiting exposed IOCTLs with no validation on device selection, register offset, or value. Attackers can obtain a device handle and issue arbitrary PCI configuration space read/write operations to enable Bus Master DMA on any PCI device, halt storage controller I/O by clearing command registers, or remap Base Address Registers to redirect DMA to an attacker-chosen physical address.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
无充分访问控制条件下暴露IOCTL
Source: CVE Program / CVE List V5
Vulnerability Title
PassMark Software PerformanceTest 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PassMark Software PerformanceTest是PassMark Software公司的一款电脑性能测试软件。 PassMark Software PerformanceTest 11.1 build 1012之前版本、BurnInTest 11.1 build 1000之前版本和OSForensics 11.1 build 1016之前版本存在权限许可和访问控制问题漏洞，该漏洞源于DirectIo64.sys中暴露的IOCTL未对设备选择、寄存器偏移或值进行验证，导致权限提升，本地用
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| PassMark Software | PerformanceTest | 0 ~ 11.1 build 1012 | - |
|
| PassMark Software | BurnInTest | 0 ~ 11.1 build 1000 | - |
|
| PassMark Software | OSForensics | 0 ~ 11.1 build 1016 | - |
|
II. Public POCs for CVE-2026-80116
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-80116
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-80116 (1)
Proof of Concept for CVE-2026-80116 (1)
-
🔗 GitHub - floppywiggler/directio64-disclosure · GitHub Read full article technical-description exploit
Security Blog Posts for CVE-2026-80116 (1)
Vendor Pages for CVE-2026-80116 (2)
Same Patch Batch · PassMark Software · 2026-09-04 · 8 CVEs total
| CVE-2026-80114 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authenticatio |
| CVE-2026-80119 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via Direc |
| CVE-2026-80112 | 7.8 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo |
| CVE-2026-80113 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.s |
| CVE-2026-80117 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via Direct |
| CVE-2026-80118 | 7.1 HIGH | PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via |
| CVE-2026-80115 | 6.1 MEDIUM | PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR |
IV. Related Vulnerabilities
Same product: PerformanceTest
-
CVE-2026-80119
PassMark PerformanceTest, BurnInTest, and OSForensics Physic -
CVE-2026-80118
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80117
PassMark PerformanceTest, BurnInTest, and OSForensics Arbitr -
CVE-2026-80115
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80114
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-c
Same vendor: PassMark Software
-
CVE-2026-80119
PassMark PerformanceTest, BurnInTest, and OSForensics Physic -
CVE-2026-80118
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80117
PassMark PerformanceTest, BurnInTest, and OSForensics Arbitr -
CVE-2026-80115
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel -
CVE-2026-80114
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-c
V. Comments for CVE-2026-80116
No comments yet