CVE-2026-15417
MediumCVSS 6.9Summary
The silabser.sys driver for CP210x devices on Windows 8 allows a local unprivileged user to use incorrect driver settings to cause a kernel crash.
Risk Assessment
A local unprivileged user can cause a kernel crash, resulting in denial of service. This requires local access to the system.
Recommendation
Upgrade the silabser.sys driver for CP210x devices to a version containing the fix once available. Until patched, restrict local access to systems with this driver.
Other vulnerabilities in silabser.sys
See all- CVE-2026-15419High
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
- CVE-2026-15418Low
The silabser.sys driver for CP210x devices v11.5.0 and earlier allows a local unprivileged user with a malicious device to use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This affects Windows 10 and earlier.
Original NVD description (English source)
In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash.