EUVD-2026-48453

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

CVE-2026-54120

Technical details for CVE-2026-54120 are not publicly available in the provided documents. The materials only reiterate the description of improper input validation in Microsoft Surface. Monitor for updates from vendors for affected products and patches.

CVE-2026-54120

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability

...

Microsoft Surface Remote Code Execution Vulnerability

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

PT-2026-64204

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...

CVE-2026-48581

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...

CVE-2026-48581

CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...

Surface Broker SDMA Elevation of Privilege Vulnerability

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...

EUVD-2021-29274

Malicious code in bioql PyPI...

EUVD-2025-2271

Malicious code in bioql PyPI...

The vulnerability of Microsoft Surface sensor display microprogramming software, related to insufficient validation of input data, allows a hacker to bypass security functions.

The vulnerability of Microsoft Surface sensor display software is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...

CVE-2025-21194

Microsoft Surface Security Feature Bypass Vulnerability...

CVE-2025-21194

Microsoft Surface Security Feature Bypass Vulnerability...

CVE-2025-21194 Microsoft Surface Security Feature Bypass Vulnerability

...

CVE-2025-21194 Microsoft Surface Security Feature Bypass Vulnerability

...

CVE-2025-21194

CVE-2025-21194 is a Microsoft Surface Security Feature Bypass vulnerability affecting Surface devices. The connected Rapid7 Patch Tuesday coverage describes exploitation as a potential container escape from a UEFI host, leading to hypervisor compromise. Updates are delivered via Windows Update ac...

Microsoft Surface Security Feature Bypass Vulnerability

...

Microsoft Surface 输入验证错误漏洞

Microsoft Surface is a tablet computer from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Surface. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Surface Laptop 4 with Intel...

PT-2025-6294

Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description The issue concerns a security feature bypass. No specific details about technical exploitation or affected devices are provided. Recommendations At the moment, there is no informati...