← Database

CVE-2026-54120

CRITICAL CVSS: 9.9 Published: 2026-07-24 Modified: 2026-08-06

Description

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Surface Management Services

Weakness Type

CWE-20

References