Local User Kernel Crash Vulnerability in CP210x Windows Driver by Silicon Labs
CVE-2026-15417

6.9MEDIUM

Key Information:

Vendor

Silicon Labs

Status
Silabser.sys Driver
Vendor
CVE Published:
10 September 2026

What is CVE-2026-15417?

The CP210x Windows driver, specifically the silabser.sys component, allows local unprivileged users to manipulate driver settings, potentially leading to a system kernel crash. This vulnerability can be exploited without elevated privileges, presenting a risk for stability and security in systems utilizing CP210x devices.

Affected Version(s)

silabser.sys driver 0 <= 6.7.6

References

https://siliconlabs.lightning.force.com/sfc/servlet.sheph...
vendor-advisorypermissions-required

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.