Privilege Escalation Vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics
CVE-2026-80116

8.5HIGH

Key Information:

Vendor

Passmark Software

Status
Performancetest
Burnintest
Osforensics
Vendor
CVE Published:
4 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-80116?

A vulnerability exists within DirectIo64.sys in PassMark PerformanceTest, BurnInTest, and OSForensics that allows local users to perform privilege escalation. This vulnerability enables attackers to exploit unvalidated IOCTLs to manipulate hardware configurations, giving them the ability to execute arbitrary read/write operations in the PCI configuration space. This can lead to enabling Bus Master DMA on any PCI device, interrupting storage controller I/O, or misrouting DMA to unintended physical addresses. Such exploitation can have severe implications for system integrity and security.

Affected Version(s)

BurnInTest 0

OSForensics 0

PerformanceTest 0

References

https://github.com/floppywiggler/directio64-disclosure
technical-descriptionexploit
https://www.passmark.com/products/performancetest/history...
release-notespatch
https://www.passmark.com/products/burnintest/history.php
release-notespatch

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Emil Sørbrøden
.