Information Disclosure Vulnerability in PassMark Products
CVE-2026-80119

8.5HIGH

Key Information:

Vendor

Passmark Software

Status
Performancetest
Burnintest
Osforensics
Vendor
CVE Published:
4 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-80119?

An information disclosure vulnerability exists in DirectIo64.sys, affecting several PassMark products. Local attackers can exploit this vulnerability by supplying a caller-controlled file path to an exposed IOCTL mechanism. This allows the attacker to dump complete physical memory contents, including sensitive information such as process memory, LSASS working sets, and cryptographic material, by triggering a single IOCTL call. This is achieved by iterating over all physical memory ranges and mapping each page in the SYSTEM context, thereby bypassing user-mode Access Control Lists (ACLs).

Affected Version(s)

BurnInTest 0

OSForensics 0

PerformanceTest 0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-80119 - Proof of Concept

References

https://github.com/floppywiggler/directio64-disclosure
technical-descriptionexploit
https://www.passmark.com/products/performancetest/history...
release-notespatch
https://www.passmark.com/products/burnintest/history.php
release-notespatch

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Emil Sørbrøden
.