LOW 2.4 NVD

CVE-2026-15418

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.

References

https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm000010

Published: 2026-09-10 · Source: NVD · Feed updated: 2026-09-11

This low severity vulnerability with a CVSS score of 2.4 was published on 2026-09-10 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.