CVE-2026-8501

Published: Jun 1, 2026Modified: Jul 22, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

Related CWEs

CWE-782

Exposed IOCTL with Insufficient Access Control

The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.

References (4)

https://kb.cert.org/vuls/id/158530

Source: cret@cert.org

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules

Source: cret@cert.org

https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language

Source: cret@cert.org

https://www.kb.cert.org/vuls/id/158530

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.