CVE-2026-8501: Symantec Pc Tools Internet Security

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit this vulnerability to perform sensitive and privileged operations on the target system.

Affected products

• Symantec Pc Tools Internet Security: any version

Published 2026-06-01. Last modified 2026-07-22.