7.8
High
CVE-2026-48581 Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges…
Description
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Surface Go | Versions not published | |
| Microsoft Surface Hub | Versions not published | |
| Microsoft Surface Laptop Go | Versions not published | |
| Microsoft Surface Laptop Go 3 | Versions not published | |
| Microsoft Surface Pro | Versions not published | |
| Microsoft Surface Pro 8 | Versions not published | |
| Surface Laptop 4 with AMD Processor | Versions not published | |
| Surface Laptop 4 with Intel Processor | Versions not published | |
| Surface Windows Dev Kit | Versions not published |
References
- Surface Broker SDMA Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified