Silicon Labs has 12 CVEs on record. Disclosure cadence is accelerating: 11 in the last 90 days against 1 in the 90 before. The busiest recent month was October 2026 with 8. The median CVSS is 6.0 (medium). None have a confirmed exploitation report. The most common weakness class is CWE-121 (4). Most affected products: EmberZNet (6), silabser.sys driver (3), Z-Wave SDK (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.0
- Publish → KEV
- —
- Last 90 days
- 11 prev 1
Weakness classes
Products
- EmberZNet 6
- silabser.sys driver 3
- Z-Wave SDK 2
- Connect SDK 1
Worst active — by depth score
CVE-2026-94502High· 7.5Out-of-bounds write in Zigbee Publish Price Matrix handling41CVE-2026-85079High· 7.5Out-of-bounds write in Zigbee Simple_Desc_req handling41CVE-2026-66279High· 7.2Dis-connect vulnerability in Connect Stack40CVE-2026-15419High· 7.0CP210x Driver Memory Corruption results in Arbitrary Code Execution39CVE-2026-15417Medium· 6.9CP210x Denial of Service38
Silicon Labs vulnerabilities
CVEs affecting Silicon Labs, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2026-85079High· 7.5Out-of-bounds write in Zigbee Simple_Desc_req handling
In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from a device that has already joined the network, and the at…
CVE-2026-89409Medium· 5.3Unvalidated ZWAVE_CMD_NODES_EXIST May Cause Deletion of End Nodes
In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must co…
CVE-2026-89410Medium· 5.1Out-of-bounds read in Z-Wave NCP SPI Handler
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information.
CVE-2026-66279High· 7.2Dis-connect vulnerability in Connect Stack
In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or…
CVE-2026-66282Medium· 6.0Authenticated Denial-of-Service in Zigbee Publish Billing Period
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only …
CVE-2026-94502High· 7.5Out-of-bounds write in Zigbee Publish Price Matrix handling
In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come from a device that has already joined the network. Only …
CVE-2026-85080Medium· 6.0Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this vulnerability, so no route to remote code execution was …
CVE-2026-66281Medium· 6.0Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These messages must come from a device that has already joined the network. Only devices suppor…
CVE-2026-15418Low· 2.4CP210x Memory Leakage
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Window…
CVE-2026-15419High· 7.0CP210x Driver Memory Corruption results in Arbitrary Code Execution
In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to corrupt kernel pool memory, resulting in arbitrary code execution with escalated privileges.
CVE-2026-15417Medium· 6.9CP210x Denial of Service
In the silabser.sys Windows 8 driver for CP210x devices, a local unprivileged user can use incorrect driver settings to cause a kernel crash.
CVE-2026-6432Medium· 5.3Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory leakage
Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crashes or dynamic memory leakage. In order to exploit this vulnerability, an attac…