CVE-2026-15419
CVE-2026-15419
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
Vulnerability class: Buffer Overflow
Weakness classification (CWE)
References
- product-security@silabs.com (vendor-advisory, permissions-required)