CVE-2026-15418

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.

  • Published Sep 10, 2026
  • CVSS 2.4 low
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-15418 at the National Vulnerability Database