MSRC compact vulnerability detail

CVE-2024-55414 · Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative update. Soft modem hardware dependent on these specific drivers will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.

Severity
Important
Impact
Elevation of Privilege
CVSS
7.8 base · 6.8 temporal
Release
2026-01-13
Signals
Windows Motorola Soft Modem Driver Elevation of Privilege Exploited: No Publicly disclosed: No Exploitability: Exploitation Unlikely
CWE
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Old version New version
Description
Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative update. Soft modem hardware dependent on these specific drivers will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
FAQ / Articles
Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Motorola Soft Modem Driver allows an authorized attacker to elevate privileges locally.
FAQ
What privileges could be gained by an attacker who successfully exploited this vulnerability? An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.