CVE-2026-15418

The silabser.sys driver for CP210x devices in Windows 10 and earlier versions is vulnerable to a local attack where an unprivileged user can exploit malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. While the severity is classified as low, organizations using these devices should prioritize patching to mitigate potential information disclosure risks. Users of affected systems should be particularly vigilant in environments where untrusted devices may be connected.