High severity7.8NVD Advisory· Published Jul 14, 2026· Updated Jul 24, 2026
CVE-2026-48581
CVE-2026-48581
Description
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Affected products
28- cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_hub_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1951_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1953_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1959_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_4_1979_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_go_1943_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_go_2_2013_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_laptop_go_3_2013_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_pro_7\+_1960_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_pro_7\+_with_lte_advanced_1961_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581nvdVendor Advisory
News mentions
0No linked articles in our index yet.