What’s Vulnerable › Vulnerabilities

CVE-2026-80117: PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-08
• Weakness: CWE-782

Description

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any x86 I/O port due to missing allowlist or port validation on exposed IOCTLs. Attackers can obtain a device handle and write to sensitive ports including the PS/2 controller port, CPU reset ports, CMOS configuration ports, and interrupt controller ports to cause an immediate system reset or other hardware-level manipulation from a standard user account.

Affected products

• PassMark Software BurnInTest: before 11.1 build 1000 — fixed in 11.1 build 1000
• PassMark Software OSForensics: before 11.1 build 1016 — fixed in 11.1 build 1016
• PassMark Software PerformanceTest: before 11.1 build 1012 — fixed in 11.1 build 1012

How to fix

Upgrade to a fixed version: PassMark Software BurnInTest 11.1 build 1000; PassMark Software OSForensics 11.1 build 1016; PassMark Software PerformanceTest 11.1 build 1012. Check the vendor advisory for mitigations.

References

• https://dkom.dev/posts/directio64-disclosure/
• https://github.com/floppywiggler/directio64-disclosure
• https://www.osforensics.com/whats-new.html
• https://www.passmark.com/products/burnintest/history.php
• https://www.passmark.com/products/performancetest/history.php
• https://www.vulncheck.com/advisories/passmark-performancetest-burnintest-and-osforensics-arbitrary-i-o-port-access-via-directio64-sys

Get alerted when CVE-2026-80117 or the next vulnerability affects your stack