CVE-2026-80119

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) share an information disclosure vulnerability in the DirectIo64.sys driver. An unauthenticated local attacker can issue a single IOCTL call supplying a caller-controlle...

EUVD-2026-71690

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dump complete physical memory contents by supplying a...

CVE-2026-80119 PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dump complete physical memory contents by supplying a...

CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

EUVD-2026-71689

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handl...

CVE-2026-80118

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) contain an unauthenticated physical memory disclosure in DirectIo64.sys . A single IOCTL with no caller-identity check allows unprivileged local users to write a crash-...

CVE-2026-80114

PassMark PerformanceTest (before 11.1 build 1012), BurnInTest (before 11.1 build 1000), and OSForensics (before 11.1 build 1016) share a hard-coded credentials vulnerability in the shared driver DirectIo64.sys . An 8-byte key embedded as a hardcoded literal in the distributed binary allows local ...

EUVD-2026-71685

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary physical memory writes by extracting an 8-byte key embedded ...

EUVD-2026-71684

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the...

CVE-2026-80113

PassMark PerformanceTest , BurnInTest , and OSForensics are affected by a local privilege escalation vulnerability in the DirectIo64.sys kernel driver. The root cause is a missing validation of the physical address parameter in an exposed IOCTL handler , allowing a local user to supply an arbitra...

rekall

Descontinuación de Rekall Este proyecto ya no tiene mantenimiento. En diciembre de 2011, se creó una nueva rama dentro del proyecto Volatility para explorar cómo hacer que la base de código sea más modular, mejorar el rendimiento y aumentar la usabilidad. Esta rama luego se bifurcó para convertir...

PT-2026-86227

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description The DirectIo64.sys driver contains hard-coded credentials. Local attackers can...

PT-2026-86231

Name of the Vulnerable Software and Affected Versions PassMark PerformanceTest versions prior to 11.1 build 1012 BurnInTest versions prior to 11.1 build 1000 OSForensics versions prior to 11.1 build 1016 Description An unauthenticated physical memory disclosure exists in the DirectIo64.sys driver...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2026-80560

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits on sigreturn restoresigcontext copies the whole supervision register SR from the signal frame and only clears SPRSRSM before the value is reloaded into the hardware SR through E...

cve-2026-3437

cve-2026-3437 portwell.sys Portwell Engineering Toolkits v4.8.2 में MmMapIoSpace के माध्यम से मनमाना भौतिक मेमोरी रीड/राइट। ड्राइवर के IOCTL इंटरफ़ेस के साथ इंटरैक्ट करके LPE/SYSTEM एस्केलेशन और BYOVD को सक्षम बनाता है। विश्लेषण ड्राइवर IRPMJDEVICECONTROL के लिए एक डिस्पैच रूटीन पंजीकृत करता है...

EUVD-2026-63809

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size when allocating physical pages leading to OOB read and/or write due to improper validation of the said value. Such crafted log2 page size could lead to 4K pages being treated a...

Exploit for CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W...

phymem-exploit

phymem-exploit Proof-of-concept exploit for Supermicro's phym...

CVE-2026-16280

An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in...