CVE-2025-52347

CVSS 7.8 HIGHEPSS 0.1%CWE-20 CWE-269

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 may 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-52347 https://www.osforensics.com/whats-new.html https://www.passmark.com/products/burnintest/history.php https://www.passmark.com/products/performancetest/history.php