5
CVEs
0
Critical
2
High
0
KEV
0
PoC
1
Unpatched C/H
40.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
2
LOW
1
Monthly CVE Trend
Affected Products (7)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-5706 | Remote code execution is possible in Silicon Labs Bluetooth Mesh SDK 6.1.4 and earlier through malformed Bluetooth extended advertisements that trigger out-of-bounds writes and stack corruption. The vulnerability is reachable only from devices already provisioned into the target mesh network, and only on provisioner nodes that have enabled extended advertisement support. No public exploit or CISA KEV listing has been identified at time of analysis, though the CVSS 4.0 base score of 8.9 reflects the high impact if exploitation conditions are met. | HIGH | 8.9 | 0.3% | 45 |
|
| CVE-2026-15419 | Kernel pool memory corruption in Silicon Labs silabser.sys (the Windows kernel driver for CP210x USB-to-serial bridge devices) v11.5.0 and earlier allows a local unprivileged user who physically attaches a malicious CP210x-compatible USB device to escalate privileges to kernel-level code execution. The driver fails to validate USB device-supplied packet data before processing, enabling crafted malformed packets to corrupt Windows kernel pool allocations. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis. | HIGH | 7.0 | 0.2% | 35 |
No patch
|
| CVE-2026-15417 | Kernel denial-of-service in Silicon Labs' silabser.sys Windows 8 driver for CP210x USB-to-UART bridge devices allows any local unprivileged user to trigger a kernel crash by supplying incorrect driver settings. The root cause is CWE-369 (Divide by Zero) inside a kernel-mode driver, meaning exploitation produces a Blue Screen of Death (BSOD) and full system reboot. No public exploit code or active exploitation has been identified at time of analysis. | MEDIUM | 6.9 | 0.1% | 34 |
No patch
|
| CVE-2026-17610 | Denial of service in Silicon Labs SiSDK v2026.6.0 and earlier affects EFR32MG24 and EFR32MG26 wireless SoCs running concurrent multiprotocol Zigbee and Thread. Under high network traffic loads, ACK packets are dropped, causing the device networking stack to fail and rendering the IoT endpoint unresponsive. No public exploit has been identified and active exploitation has not been confirmed by CISA KEV, but the patch is available from the vendor. | MEDIUM | 6.0 | 0.2% | 30 |
|
| CVE-2026-15418 | Kernel pool memory disclosure in Silicon Labs silabser.sys driver (v11.5.0 and earlier) allows a local attacker with physical device access to leak up to 145 bytes of uninitialized kernel pool memory by presenting a malicious USB device that sends malformed packets to the driver on Windows 10 and earlier. The CVSS 4.0 score of 2.4 reflects the narrow physical-access prerequisite (AV:P) and limited read-only confidentiality impact. No public exploit code and no CISA KEV listing have been identified at time of analysis. | LOW | 2.4 | 0.2% | 12 |
No patch
|