Answer in brief
CVE-2026-80116 records a High severity (CVSS 8.5) vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL. The current sources do not mark it as known exploited. The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/OSForensics (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/OSForensics (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| PassMark Software/BurnInTestgeneric | >=0 <11.1 build 1000 | 11.1 build 1000, 11.1 |
| PassMark Software/BurnInTestgeneric | * | Not reported |
| PassMark Software/OSForensicsgeneric | >=0 <11.1 build 1016 | 11.1 build 1016, 11.1 |
| PassMark Software/OSForensicsgeneric | * | Not reported |
| PassMark Software/PerformanceTestgeneric | >=0 <11.1 build 1012 | 11.1 build 1012, 11.1 |
| PassMark Software/PerformanceTestgeneric | * | Not reported |
Published upstream
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to modify hardware configuration by exploiting exposed IOCTLs with no validation on device selection, register offset, or value. Attackers can obtain a device handle and issue arbitrary PCI configuration space read/write operations to enable Bus Master DMA on any PCI device, halt storage controller I/O by clearing command registers, or remap Base Address Registers to redirect DMA to an attacker-chosen physical address.
Quoted source text, attributed separately from HOL analysis.