PT-2026-36532 · Passmark · Osforensics+2

Published 2026-05-01 · Updated 2026-05-04 · CVE-2025-52347

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BurnInTest version 11.0 Build 1011 OSForensics version 11.1 Build 1007 PerformanceTest version 11.1 Build 1004

Description A flaw in the DirectIo64.sys component allows attackers to access kernel memory and escalate privileges. This is achieved through a crafted IOCTL 0x8011E044 call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

RCE

Improper Privilege Management

Weakness Enumeration

CWE-20

CWE-269

Related Identifiers

CVE-2025-52347

Affected Products

Burnintest

Osforensics

Performancetest

References · 8

• 🔥 https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2025-52347 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-52347 · Security Note
• https://osforensics.com/whats-new.html · Note
• https://passmark.com/products/performancetest/history.php · Note
• https://passmark.com/products/burnintest/history.php · Note
• https://reddit.com/r/CVEWatch/comments/1t2hd5y/top_10_trending_cves_03052026 · Reddit Post
• https://t.me/CVEtracker/52454 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1t3d9oz/top_10_trending_cves_04052026 · Reddit Post