Low severity · published Sep 10, 2026
CVE-2026-15418
CP210x Memory Leakage
2.4
CVSS
0.2%
EPSS
No
On KEV
Description
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
silabser.sys driver · Silicon Labs
through 11.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-15418
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-15418
siliconlabs.lightning.force.com
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1
More from silabser.sys driver
7.0
CVE-2026-15419
CP210x Driver Memory Corruption results in Arbitrary Code Execution
6.9
CVE-2026-15417
CP210x Denial of Service