CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://kb.cert.org/vuls/id/158530
https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules
https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
https://www.kb.cert.org/vuls/id/158530

Configurations

No configuration.

History

No history.

Information

Published : 2026-06-01 17:17

Updated : 2026-07-22 07:10

NVD link : CVE-2026-8501

Mitre link : CVE-2026-8501

CVE.ORG link : CVE-2026-8501

JSON object : View

Products Affected

No product.

CWE

CWE-782

Exposed IOCTL with Insufficient Access Control

{"id": "CVE-2026-8501", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8501", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-01T18:20:00.476148Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cret@cert.org", "affectedData": [{"vendor": "Symantec", "product": "PC Tools Internet Security", "versions": [{"status": "affected", "version": "*"}]}]}], "published": "2026-06-01T17:17:35.513", "references": [{"url": "https://kb.cert.org/vuls/id/158530", "source": "cret@cert.org"}, {"url": "https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules", "source": "cret@cert.org"}, {"url": "https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language", "source": "cret@cert.org"}, {"url": "https://www.kb.cert.org/vuls/id/158530", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-782"}]}], "descriptions": [{"lang": "en", "value": "Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system."}, {"lang": "es", "value": "Control de acceso inadecuado en el controlador del kernel de Windows PCTCore64.sys de PC Tools Internet Security permite a los procesos en modo de usuario acceder a la interfaz de dispositivo WDM PCTCoreDriver e invocar manejadores IOCTL privilegiados. Un atacante local con la capacidad de acceder o cargar el controlador afectado puede explotar esta vulnerabilidad para realizar operaciones sensibles y privilegiadas en el sistema objetivo."}], "lastModified": "2026-07-22T07:10:00.107", "sourceIdentifier": "cret@cert.org"}