CVE-2026-80113
Received Received - Intake

Privilege Escalation in PassMark PerformanceTest via DirectIo64.sys

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the physical address parameter in an exposed IOCTL handler. Attackers can obtain a device handle and supply an arbitrary 64-bit physical address with a bit index to invoke MmMapIoSpace and clear bits in kernel code pages or page table entries, enabling local privilege escalation or system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80113
EUVD
EUVD-2026-71684

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
passmark performancetest to 11.1.0 (exc)
passmark burnintest to 11.1.0 (exc)
passmark osforensics to 11.1.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
CWE-782 The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a privilege escalation flaw in PassMark PerformanceTest, BurnInTest, and OSForensics versions before 11.1 build 1012, 1000, and 1016 respectively. It exists in the DirectIo64.sys driver due to missing validation of physical address parameters in an IOCTL handler. Attackers can exploit this to clear arbitrary bits at any physical memory address, potentially modifying kernel code or page tables to gain elevated privileges or compromise the system.

Detection Guidance

This vulnerability involves the DirectIo64.sys driver in PassMark software. To detect it, check for the presence of the vulnerable driver files (DirectIo64.sys) in system directories like C:\Windows\System32\drivers. Use commands such as 'dir DirectIo64.sys /s' in Command Prompt or 'find / -name DirectIo64.sys' in PowerShell. Verify the driver version against the patched versions (PerformanceTest 11.1 build 1012+, BurnInTest 11.1 build 1000+, OSForensics 11.1 build 1016+).

Impact Analysis

If exploited, this vulnerability allows local attackers to escalate privileges to kernel level, enabling full system compromise. Attackers could bypass security controls, install malware, steal sensitive data, or perform other malicious actions with elevated permissions. Systems running vulnerable versions of these PassMark tools are at risk.

Compliance Impact

This vulnerability allows local attackers to escalate privileges or compromise systems by manipulating kernel memory. While not directly tied to data handling, such flaws could undermine security controls required by GDPR (e.g., integrity of processing) or HIPAA (e.g., unauthorized access to protected health information). Compliance may be impacted if systems are not properly patched.

Mitigation Strategies

Update PassMark PerformanceTest to version 11.1 build 1012 or later, BurnInTest to version 11.1 build 1000 or later, and OSForensics to version 11.1 build 1016 or later to address the privilege escalation vulnerability in DirectIo64.sys.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80113. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart