VulnSocial

CVE-2026-80118General

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL with no caller-identity check. The handler writes a crash-dump-format (PAGEDU64) image of all physical memory to a caller-supplied file path in the SYSTEM context, allowing a standard user to create files in locations they cannot otherwise write and to recover memory belonging to processes of other users. The image is preceded by a header that exposes the kernel loaded-module list, active-process list and PFN database pointers, defeating KASLR. The same handler also dereferences the return value of an internal kernel-structure locator without a NULL check; that locator returns NULL on three distinct failure paths, and a kernel crash results on builds where any of those paths is taken.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-73CWE-476CWE-497

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-04); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-04: 1Mentions · 2026-09-07: 1Patch / Workaround · 2026-09-07: 1Technical Details · 2026-09-04: 1Technical Details · 2026-09-07: 109-0409-07
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-041
General1
2026-09-071
Disclosure1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    CVE-2026-80118: Unpatched flaw in PassMark PerformanceTest, BurnInTest & OSForensics (DirectIo64.sys) lets local users dump all physical memory via IOCTL—exposing passwords, keys, and data. CVSS 7.1. No patch yet. Stop using these https://www.valtersit.com/cve/CVE-2026-80118/ #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany #docker #kali

    Post summary

    The post discloses CVE-2026-80118, a local user memory‑dump flaw in PassMark tools that exposes sensitive data, notes that no patch is available, and advises discontinuing use.

    0000038
    1.0K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-80118 PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory … https://www.cve.org/CVERecord?id=CVE-2026-80118

    Post summary

    The text identifies CVE‑2026‑80118 as affecting specific versions of PassMark PerformanceTest, BurnInTest, and OSForensics, highlighting an unauthenticated physical‑memory vulnerability, but offers no PoCs, exploits, patches, or evidence of active exploitation.

    000001.4K
    58.1K followersView on X

Explore more

Back to dashboard