Local Privilege Escalation in CP210x Driver by Silicon Labs

CVE-2026-15419

What is CVE-2026-15419?

The CP210x driver for Silicon Labs devices prior to version 11.5.0 is susceptible to a local privilege escalation vulnerability. A local unprivileged user can exploit this weakness by sending specially crafted malformed packets to the silabser.sys driver. This can lead to corruption of kernel pool memory, enabling the execution of arbitrary code with escalated privileges. It is crucial for users and system administrators to ensure their CP210x driver is updated to the latest version to mitigate this security risk.

References