CVEvulnerability

CVE-2025-52347

7.8 HIGH Published 2026-05-01 Modified 2026-10-19 Official page ↗

Status: Awaiting Analysis
Published: 2026-05-01
Last modified: 2026-10-19
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-20, CWE-269

Description

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-269 Improper Privilege Management weakness

References

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-52347 github.com
https://www.osforensics.com/whats-new.html www.osforensics.com
https://www.passmark.com/products/burnintest/history.php www.passmark.com
https://www.passmark.com/products/performancetest/history.php www.passmark.com

CVE-2025-52347

Description

Related

Weakness · CWE (2)

References