{"id":"CVE-2026-15418","title":"CP210x Memory Leakage","summary":"In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Window…","severity":"low","cvss":2.4,"cvssVector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-130"],"vendor":"Silicon Labs","product":"silabser.sys driver","affected":["silabser.sys_driver <= 11.5.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T18:21:15.355138Z"},"published":"2026-09-10","updated":"2026-09-10","sourceUpdated":"2026-09-10T18:21:20.938Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-15418","references":[{"url":"https://siliconlabs.lightning.force.com/sfc/servlet.shepherd/document/download/069Vm0000100HA6IAM?operationContext=S1"}],"tags":["cve.org"],"epss":0.00154,"epssPercentile":0.04973,"ingestedAt":"2026-09-11T16:45:48.028Z","slug":"CVE-2026-15418","body":"## Overview\n\nIn the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier.\n\n## Affected\n\n- `silabser.sys_driver <= 11.5.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":13,"depthScoreParts":{"impact":13.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}