CVE-2025-52347

CVSS 7.8 HIGHEPSS 0.1%CWE-20 CWE-269

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

01 mai 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

n/a · n/a

Referências

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-52347 https://www.osforensics.com/whats-new.html https://www.passmark.com/products/burnintest/history.php https://www.passmark.com/products/performancetest/history.php