Vulnerability in Silicon Labs Silabser.sys Driver
CVE-2026-15418
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.
Affected products
Weakness classification (CWE)
References
- product-security@silabs.com (vendor-advisory, permissions-required)