← Database
CVE-2026-48581
HIGH
CVSS: 7.8
Published: 2026-07-14
Modified: 2026-07-24
Description
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Affected Platforms
Microsoft Surface Go 2 1901Microsoft Surface Hub 3 85Microsoft Surface Pro 8 1983Microsoft Surface Laptop 4 1951 FirmwareMicrosoft Surface Pro 7\+ 1960Microsoft Surface Pro 7\+ With Lte Advanced 1961Microsoft Surface Go 2 1927 FirmwareMicrosoft Surface Pro 8 For Business With Lte Advanced 1982Microsoft Surface Laptop 4 1958Microsoft Surface Laptop Go 2 2013 Firmware