This vulnerability arises from insufficient access control in the PCTCore64.sys kernel driver of Symantec PC Tools Internet Security. Specifically, user-mode processes can invoke privileged IOCTL handlers through the PCTCoreDriver WDM device interface without proper restrictions. Exploitation requires local access to the system and the ability to interact with or load the vulnerable driver. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory confirms a patch or mitigation, and the vulnerability is not related to a cloud service.

Successful exploitation allows a local attacker to perform sensitive and privileged operations on the target system, potentially leading to full compromise of system confidentiality, integrity, and availability. The vulnerability affects the kernel driver component of the security product, which operates at a high privilege level.

Patch status is not yet confirmed — check the vendor advisory at https://kb.cert.org/vuls/id/158530 for current remediation guidance. Until an official fix is available, restrict local access to systems running the affected driver and monitor for unauthorized attempts to interact with the PCTCoreDriver device interface. Avoid loading or using the vulnerable driver where possible.