PassMark Software vulnerabilities
We track 7 vulnerabilities in PassMark Software products across 3 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
Latest PassMark Software vulnerabilities
- 7.8 High severity
PerformanceTest: External Control of File Name or Path
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an information disclosure vulnerability in DirectIo64.sys that allows unauthenticated local attackers to dump complete physical m
- 7.1 High severity
PerformanceTest: External Control of File Name or Path
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical memory disclosure in DirectIo64.sys, reachable by unprivileged local users through a single IOCTL wit
- 7.1 High severity
PerformanceTest: Exposed IOCTL with Insufficient Access Control
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to issue arbitrary IN and OUT instructions to any
- 7.8 High severity
PerformanceTest: Exposed IOCTL with Insufficient Access Control
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to modify hardware configuration by exploiting exp
- 7.8 High severity
PerformanceTest: Use of Hard-coded Cryptographic Key
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary physical memory writes
- 7.1 High severity
PerformanceTest: Exposed IOCTL with Insufficient Access Control
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory add
- 7.8 High severity
PerformanceTest: Incorrect Permission Assignment for Critical Resource
PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform priv