The vulnerability resides in the DirectIo64.sys component used by PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004. By sending the IOCTL code 0x8011E044 with an attacker‑constructed payload, an adversary can read arbitrary kernel memory and gain elevated privileges on the affected system. This capability enables full system compromise, including the ability to modify critical settings, install malware, or pivot to other hosts.

The flaw impacts Windows systems running the listed versions of PassMark BurnInTest, OSForensics, and PerformanceTest, specifically the DirectIo64.sys driver. No additional vendors or versions are known from the current CNA data.

The vulnerability enables uncontrolled kernel memory access and privilege escalation, which are high‑severity consequences. The CVSS score of 7.8 reflects this severity. Although EPSS data is unavailable and the issue is not listed in CISA KEV, the nature of the flaw suggests it is actionable and could be exploited by attackers with sufficient access to trigger the vulnerable IOCTL. The potential attack vector is local or remote depending on how the affected tools are accessed, but the impact remains severe regardless of the vector.