CVE Catalog
CVE-2026-48581
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.22%
12th percentile - higher than 12% of all known CVEs
Summary
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker can gain higher privileges, enabling system settings modification or malware installation.
Recommendation
Install the latest Surface firmware updates from Microsoft.
Other vulnerabilities in Microsoft Surface
Original NVD description (English source)
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.