CVE-2026-106781
Local privilege escalation in WCH CH341SER.EXE 4.0
- CVSS 3.1
- 7.8 high
- EPSS
- <1%p13
- Published
- ·
- Modified
A flaw in WCH’s CH340/CH341 USB-to-serial Windows driver setup package, CH341SER.EXE version 4.0, lets a local attacker escalate privileges. The attacker must already be able to run code on the Windows system; no network or remote trigger is described. Users who install or run that setup package are affected. No fixed release is stated.
What to do: WCH has not listed a fixed version. Do not run CH341SER.EXE 4.0 until the vendor publishes a replacement setup package.
| Product | Affected |
|---|---|
| WCH CH340/CH341 USB-to-Serial Windows Driver setup package (CH341SER.EXE) | 4.0 |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.
- Weakness
- CWE-269
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
0 storiesNo ingested article mentions this CVE yet.