CVE-2026-48581HighCVSS 7.8

Surface Broker SDMA Elevation of Privilege Vulnerability

Published
July 17, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-48581 →

📋 Description

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

🎯 Affected products13

  • Microsoft Surface Go 2
  • Microsoft Surface Go 3
  • Microsoft Surface Hub
  • Microsoft Surface Hub 2S
  • Microsoft Surface Hub 3
  • Microsoft Surface Laptop Go
  • Microsoft Surface Laptop Go 2
  • Microsoft Surface Laptop Go 3
  • Microsoft Surface Pro 7+
  • Microsoft Surface Pro 8
  • Surface Laptop 4 with AMD Processor
  • Surface Laptop 4 with Intel Processor
  • Surface Windows Dev Kit

🔗 References (1)