CVE-2026-8501

Published: Jun 1, 2026

Modified: Jun 1, 2026

PUBLISHED

Description

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

Vendor	Product	Versions
Symantec	PC Tools Internet Security	affected `*`

References

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules

https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language

https://kb.cert.org/vuls/id/158530

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-8501

Description

Affected Products

References