Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-8501
PUBLISHED
More InfoOfficial Page
Assigner-certcc
Assigner Org ID-37e5125f-f79b-445b-8fad-9564f167944b
View Known Exploited Vulnerability (KEV) details
Published At-01 Jun, 2026 | 16:25
Updated At-01 Jun, 2026 | 18:55
Rejected At-
▼CVE Numbering Authority (CNA)
CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

Affected Products
Vendor
Symantec CorporationSymantec
Product
PC Tools Internet Security
Versions
Affected
  • *
Problem Types
TypeCWE IDDescription
N/AN/ACWE-782: Exposed IOCTL with Insufficient Access Control
Type: N/A
CWE ID: N/A
Description: CWE-782: Exposed IOCTL with Insufficient Access Control
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules
N/A
https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
N/A
https://kb.cert.org/vuls/id/158530
N/A
Hyperlink: https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules
Resource: N/A
Hyperlink: https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
Resource: N/A
Hyperlink: https://kb.cert.org/vuls/id/158530
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-782CWE-782 Exposed IOCTL with Insufficient Access Control
Type: CWE
CWE ID: CWE-782
Description: CWE-782 Exposed IOCTL with Insufficient Access Control
Metrics
VersionBase scoreBase severityVector
3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version: 3.1
Base score: 7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.kb.cert.org/vuls/id/158530
N/A
Hyperlink: https://www.kb.cert.org/vuls/id/158530
Resource: N/A
Details not found