38 matches found
EUVD-2026-48453
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability
...
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability
...
CVE-2026-54120
Technical details for CVE-2026-54120 are not publicly available in the provided documents. The materials only reiterate the description of improper input validation in Microsoft Surface. Monitor for updates from vendors for affected products and patches.
Microsoft Surface Remote Code Execution Vulnerability
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
PT-2026-64204
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
KLA91176 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in ANGLE can be exploited...
CVE-2026-48581
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...
CVE-2026-48581
CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...
Surface Broker SDMA Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally...
PT-2026-58137
Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version...
EUVD-2021-29274
Malicious code in bioql PyPI...
EUVD-2025-2271
Malicious code in bioql PyPI...
The vulnerability of Microsoft Surface sensor display microprogramming software, related to insufficient validation of input data, allows a hacker to bypass security functions.
The vulnerability of Microsoft Surface sensor display software is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to bypass security measures...
CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability...
CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability...
CVE-2025-21194
CVE-2025-21194 is a Microsoft Surface Security Feature Bypass vulnerability affecting Surface devices. The connected Rapid7 Patch Tuesday coverage describes exploitation as a potential container escape from a UEFI host, leading to hypervisor compromise. Updates are delivered via Windows Update ac...