What’s Vulnerable › Vulnerabilities
CVE-2026-15418: CP210x Memory Leakage
- Severity: low (CVSS 2.4 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-10 · updated 2026-09-10
- Weakness: CWE-130
Description
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.
Affected products
- Silicon Labs silabser.sys driver: through 11.5.0
References
Get alerted when CVE-2026-15418 or the next vulnerability affects your stack