FKIE_CVE-2026-48581

Vulnerability from fkie_nvd - Published: 2026-07-14 17:16 - Updated: 2026-07-24 13:37
Summary
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Impacted products
Vendor Product Version
microsoft surface_go_2_1901_firmware -
microsoft surface_go_2_1901 -
microsoft surface_go_2_1926_firmware -
microsoft surface_go_2_1926 -
microsoft surface_go_2_1927_firmware -
microsoft surface_go_2_1927 -
microsoft surface_go_3_1901_firmware -
microsoft surface_go_3_1901 -
microsoft surface_go_3_1926_firmware -
microsoft surface_go_3_1926 -
microsoft surface_go_3_2022_firmware -
microsoft surface_go_3_2022 -
microsoft surface_hub_firmware -
microsoft surface_hub -
microsoft surface_hub_2s_firmware -
microsoft surface_hub_2s -
microsoft surface_hub_2s_85_firmware -
microsoft surface_hub_2s_85 -
microsoft surface_hub_3_50_firmware -
microsoft surface_hub_3_50 -
microsoft surface_hub_3_85_firmware -
microsoft surface_hub_3_85 -
microsoft surface_laptop_go_1943_firmware -
microsoft surface_laptop_go_1943 -
microsoft surface_laptop_go_2_2013_firmware -
microsoft surface_laptop_go_2_2013 -
microsoft surface_laptop_go_3_2013_firmware -
microsoft surface_laptop_go_3_2013 -
microsoft surface_pro_7\+_1960_firmware -
microsoft surface_pro_7\+_1960 -
microsoft surface_pro_7\+_with_lte_advanced_1961_firmware -
microsoft surface_pro_7\+_with_lte_advanced_1961 -
microsoft surface_pro_8_1983_firmware -
microsoft surface_pro_8_1983 -
microsoft surface_pro_8_for_business_1983_firmware -
microsoft surface_pro_8_for_business_1983 -
microsoft surface_pro_8_for_business_with_lte_advanced_1982_firmware -
microsoft surface_pro_8_for_business_with_lte_advanced_1982 -
microsoft surface_laptop_4_1979_firmware -
microsoft surface_laptop_4_1979 -
microsoft surface_laptop_4_1950_firmware -
microsoft surface_laptop_4_1950 -
microsoft surface_laptop_4_1951_firmware -
microsoft surface_laptop_4_1951 -
microsoft surface_laptop_4_1952_firmware -
microsoft surface_laptop_4_1952 -
microsoft surface_laptop_4_1953_firmware -
microsoft surface_laptop_4_1953 -
microsoft surface_laptop_4_1958_firmware -
microsoft surface_laptop_4_1958 -
microsoft surface_laptop_4_1959_firmware -
microsoft surface_laptop_4_1959 -
microsoft surface_laptop_4_1978_firmware -
microsoft surface_laptop_4_1978 -

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Microsoft Surface Go",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Surface Hub",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Surface Laptop Go",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Surface Laptop Go 3",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Surface Pro",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Microsoft Surface Pro 8",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Surface Laptop 4 with AMD Processor",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Surface Laptop 4 with Intel Processor",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        },
        {
          "product": "Surface Windows Dev Kit",
          "vendor": "Microsoft",
          "versions": [
            {
              "status": "affected",
              "version": "-"
            }
          ]
        }
      ],
      "source": "secure@microsoft.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F33EDF2-9058-4329-BBF6-2FCE80433F5B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA077CA3-7A69-4226-AAD8-2BC199961704",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "80BE3894-3006-48E4-8DE9-9B059A05DCC4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1549BEF0-C1C6-4D1A-9662-1FB6672DBF69",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "32B48180-38CB-4C0E-BAF0-B99ACE575CFC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CB6A413-CB85-4A53-B851-20CD13B93688",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD1750C1-2FDE-4A84-81D8-F57DE7E24974",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "222EC78A-597B-4D14-BE1F-82102C0BB0B4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "21C3A91A-3394-45DE-8932-5431EE8BFC99",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_hub_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A0398BF-8B4A-438D-95AA-25A33EEFE564",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_hub:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "17351901-024F-4B03-AA84-67372C703301",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_1943_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F819CA0-B611-43F8-86C1-7FC50F0E7756",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_1943:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C656EB1B-3FF8-404A-BFEA-77D2F25D90B4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_2013_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3E5A4B2-EB1C-4036-A16C-6C142677B62B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2_2013:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "87A8AEDE-3268-4A57-823F-DCC09C526735",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_3_2013_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0901306-FBFE-4CBA-9C48-9842184219A9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3_2013:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A06B6DD0-370E-4107-B4B7-0248317BB9A9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_1960_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EA0F116-7986-47A1-974A-E0F50376CA82",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+_1960:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "60D64C06-D141-49C7-956F-6FA3B108F752",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_with_lte_advanced_1961_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7C594D9-3193-4DAE-84C4-650E027A255D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+_with_lte_advanced_1961:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59B147EE-718E-411B-A0F1-F077114236CC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E94C16E-94D9-4273-B8C8-BC57762F8367",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A187D45-BB47-4667-ADFE-8B9E823F221B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "17896CFB-0B7D-456A-8A82-A971C3B5F072",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "262D30D4-449E-47BB-9678-9F371B28DCF5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1979_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "53FAAED8-ECEA-4D23-8DBC-572D02D321E8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1979:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EE6A4AC-189F-4FF4-9249-BA5198526BE5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6C3A0E0-6485-411B-BC31-1A8A275CB034",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1951_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "81AE1FA8-DFE2-4C84-AE82-1CCB3EB2D807",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1951:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "87E17267-FA93-4997-8D2D-8C0EB54BC932",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB6C780C-DDCE-447D-978C-57115EBBF4B9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6110417B-F51F-42B3-95F9-AD7D6398FED3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1953_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0E3E9CE-02B3-4CAC-B898-441206C0A9F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1953:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2F8D879-05EE-4C61-996C-C1A8D6692382",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DB5B208-C22B-4A1D-832C-29B693F35586",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CD2054E-1098-4BEA-BA95-8430BF28192E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1959_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37A535B1-733C-4D0D-B278-36D78296D1CA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1959:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9BA4926B-3737-4E65-89D7-44993F87D68D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "82E9E481-0326-4229-A8A7-84DE0D095425",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally."
    }
  ],
  "id": "CVE-2026-48581",
  "lastModified": "2026-07-24T13:37:22.080",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "secure@microsoft.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-48581",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-22T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-14T17:16:50.767",
  "references": [
    {
      "source": "secure@microsoft.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581"
    }
  ],
  "sourceIdentifier": "secure@microsoft.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1220"
        }
      ],
      "source": "secure@microsoft.com",
      "type": "Secondary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…