CVE-2026-48581

🗓️ 14 Jul 2026 17:05:46Reported by microsoftType

CVE-2026-48581: Insufficient access control granularity in Microsoft Surface enables an authorized attacker to escalate privileges locally.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of Microsoft Surface sensor display microprogramming software, related to deficiencies in access control, allows attackers to escalate their privileges.	16 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-48581	14 Jul 202617:45	–	circl
Cvelist	CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability	14 Jul 202617:05	–	cvelist
EUVD	EUVD-2026-43794	14 Jul 202618:31	–	euvd
Kaspersky	KLA91144 Multiple vulnerability in Microsoft Device	14 Jul 202600:00	–	kaspersky
Microsoft CVE	Surface Broker SDMA Elevation of Privilege Vulnerability	14 Jul 202614:00	–	mscve
NVD	CVE-2026-48581	14 Jul 202617:16	–	nvd
Positive Technologies	PT-2026-58137	14 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-48581 Surface Broker SDMA Elevation of Privilege Vulnerability	14 Jul 202617:05	–	vulnrichment

NVD

CNA

Node

AND

microsoft surface_go_2_1901_firmwareMatch-

microsoft surface_go_2_1901Match-

Node

AND

microsoft surface_go_2_1926_firmwareMatch-

microsoft surface_go_2_1926Match-

Node

AND

microsoft surface_go_2_1927_firmwareMatch-

microsoft surface_go_2_1927Match-

Node

AND

microsoft surface_go_3_1901_firmwareMatch-

microsoft surface_go_3_1901Match-

Node

AND

microsoft surface_go_3_1926_firmwareMatch-

microsoft surface_go_3_1926Match-

Node

AND

microsoft surface_go_3_2022_firmwareMatch-

microsoft surface_go_3_2022Match-

Node

AND

microsoft surface_hub_firmwareMatch-

microsoft surface_hubMatch-

Node

AND

microsoft surface_hub_2s_firmwareMatch-

microsoft surface_hub_2sMatch-

Node

AND

microsoft surface_hub_2s_85_firmwareMatch-

microsoft surface_hub_2s_85Match-

Node

AND

microsoft surface_hub_3_50_firmwareMatch-

microsoft surface_hub_3_50Match-

Node

AND

microsoft surface_hub_3_85_firmwareMatch-

microsoft surface_hub_3_85Match-

Node

AND

microsoft surface_laptop_go_1943_firmwareMatch-

microsoft surface_laptop_go_1943Match-

Node

AND

microsoft surface_laptop_go_2_2013_firmwareMatch-

microsoft surface_laptop_go_2_2013Match-

Node

AND

microsoft surface_laptop_go_3_2013_firmwareMatch-

microsoft surface_laptop_go_3_2013Match-

Node

AND

microsoft surface_pro_7+_1960_firmwareMatch-

microsoft surface_pro_7+_1960Match-

Node

AND

microsoft surface_pro_7+_with_lte_advanced_1961_firmwareMatch-

microsoft surface_pro_7+_with_lte_advanced_1961Match-

Node

AND

microsoft surface_pro_8_1983_firmwareMatch-

microsoft surface_pro_8_1983Match-

Node

AND

microsoft surface_pro_8_for_business_1983_firmwareMatch-

microsoft surface_pro_8_for_business_1983Match-

Node

AND

microsoft surface_pro_8_for_business_with_lte_advanced_1982_firmwareMatch-

microsoft surface_pro_8_for_business_with_lte_advanced_1982Match-

Node

AND

microsoft surface_laptop_4_1979_firmwareMatch-

microsoft surface_laptop_4_1979Match-

Node

AND

microsoft surface_laptop_4_1950_firmwareMatch-

microsoft surface_laptop_4_1950Match-

Node

AND

microsoft surface_laptop_4_1951_firmwareMatch-

microsoft surface_laptop_4_1951Match-

Node

AND

microsoft surface_laptop_4_1952_firmwareMatch-

microsoft surface_laptop_4_1952Match-

Node

AND

microsoft surface_laptop_4_1953_firmwareMatch-

microsoft surface_laptop_4_1953Match-

Node

AND

microsoft surface_laptop_4_1958_firmwareMatch-

microsoft surface_laptop_4_1958Match-

Node

AND

microsoft surface_laptop_4_1959_firmwareMatch-

microsoft surface_laptop_4_1959Match-

Node

AND

microsoft surface_laptop_4_1978_firmwareMatch-

microsoft surface_laptop_4_1978Match-

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Go",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Hub",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Laptop Go",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Laptop Go 3",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Pro",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Surface Pro 8",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Surface Laptop 4 with AMD Processor",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Surface Laptop 4 with Intel Processor",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Surface Windows Dev Kit",
    "versions": [
      {
        "version": "-",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581

03 Aug 2026 22:54Current

6Medium risk

Vulners AI Score6

CVSS 3.17.8

EPSS0.00214

SSVC

CWE-1220