CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

Score

CVSS 3.1 7.8 High

Status

Awaiting Analysis - cret@cert.org

Published

2026-06-01

Last modified

2026-06-01

Weaknesses

CWE-782

Affected products

• Pc Tools Internet Security (Symantec)

References

• https://kb.cert.org/vuls/id/158530
• https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/de…
• https://learn.microsoft.com/en-us/windows/win32/secauthz/security-descriptor-definition-language
• https://www.kb.cert.org/vuls/id/158530