Answer in brief
CVE-2026-80117 records a Medium severity (CVSS 6.9) vulnerability in PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys. The current sources do not mark it as known exploited. The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/OSForensics (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 6.9. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps PassMark Software/BurnInTest (generic), PassMark Software/BurnInTest (generic), PassMark Software/OSForensics (generic), PassMark Software/OSForensics (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| PassMark Software/BurnInTestgeneric | >=0 <11.1 build 1000 | 11.1 build 1000, 11.1 |
| PassMark Software/BurnInTestgeneric | * | Not reported |
| PassMark Software/OSForensicsgeneric | >=0 <11.1 build 1016 | 11.1 build 1016, 11.1 |
| PassMark Software/OSForensicsgeneric | * | Not reported |
| PassMark Software/PerformanceTestgeneric | >=0 <11.1 build 1012 | 11.1 build 1012, 11.1 |
| PassMark Software/PerformanceTestgeneric | * | Not reported |
Published upstream
Sep 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 4, 2026
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any x86 I/O port due to missing allowlist or port validation on exposed IOCTLs. Attackers can obtain a device handle and write to sensitive ports including the PS/2 controller port, CPU reset ports, CMOS configuration ports, and interrupt controller ports to cause an immediate system reset or other hardware-level manipulation from a standard user account.
Quoted source text, attributed separately from HOL analysis.