CVE-2026-15419
HighCVSS 7.0Summary
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
Risk Assessment
A local attacker could gain full control of the system by executing arbitrary code in kernel context, representing a serious security breach. However, this requires physical access or the ability to connect a malicious device.
Recommendation
Update the silabser.sys driver to a version later than 11.5.0 that includes the fix. Restrict the ability to connect unauthorized USB devices to critical systems.
Other vulnerabilities in silabser.sys
See all- CVE-2026-15418Low
The silabser.sys driver for CP210x devices v11.5.0 and earlier allows a local unprivileged user with a malicious device to use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This affects Windows 10 and earlier.
- CVE-2026-15417Medium
The silabser.sys driver for CP210x devices on Windows 8 allows a local unprivileged user to use incorrect driver settings to cause a kernel crash.
Original NVD description (English source)
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.