CVE-2020-0702

CVE-2020-0702 is a security feature bypass affecting Microsoft Surface Hub. The vulnerability allows bypass of credential prompts to access administrator-restricted settings due to improper credential validation when accessing these settings. The exploit requires physical access to the Surface Hu...

CVE-2026-48581

CVE-2026-48581 affects Microsoft Surface. It describes insufficient granularity of access control enabling a locally authenticated attacker to escalate privileges (Impact: high; CVSS 3.1 base 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected records show the vulnerability in Surface Broker SDM...