High severity · published Sep 10, 2026
CVE-2026-15419
CP210x Driver Memory Corruption results in Arbitrary Code Execution
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
silabser.sys driver · Silicon Labs
through 11.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-15419
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-15419
siliconlabs.lightning.force.com
https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1
More from silabser.sys driver
6.9
CVE-2026-15417
CP210x Denial of Service
2.4
CVE-2026-15418
CP210x Memory Leakage