{"id": "CVE-2026-48581", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48581", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-22T00:00:00+00:00"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "secure@microsoft.com", "affectedData": [{"vendor": "Microsoft", "product": "Microsoft Surface Go", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Hub", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Laptop Go 3", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Microsoft Surface Pro 8", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with AMD Processor", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Laptop 4 with Intel Processor", "versions": [{"status": "affected", "version": "-"}]}, {"vendor": "Microsoft", "product": "Surface Windows Dev Kit", "versions": [{"status": "affected", "version": "-"}]}]}], "published": "2026-07-14T17:16:50.767", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-1220"}]}], "descriptions": [{"lang": "en", "value": "Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally."}], "lastModified": "2026-07-24T13:37:22.080", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F33EDF2-9058-4329-BBF6-2FCE80433F5B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA077CA3-7A69-4226-AAD8-2BC199961704"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "80BE3894-3006-48E4-8DE9-9B059A05DCC4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1549BEF0-C1C6-4D1A-9662-1FB6672DBF69"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "32B48180-38CB-4C0E-BAF0-B99ACE575CFC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CB6A413-CB85-4A53-B851-20CD13B93688"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD1750C1-2FDE-4A84-81D8-F57DE7E24974"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "222EC78A-597B-4D14-BE1F-82102C0BB0B4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21C3A91A-3394-45DE-8932-5431EE8BFC99"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A0398BF-8B4A-438D-95AA-25A33EEFE564"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "17351901-024F-4B03-AA84-67372C703301"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_1943_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F819CA0-B611-43F8-86C1-7FC50F0E7756"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_1943:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C656EB1B-3FF8-404A-BFEA-77D2F25D90B4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_2013_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3E5A4B2-EB1C-4036-A16C-6C142677B62B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2_2013:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "87A8AEDE-3268-4A57-823F-DCC09C526735"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_go_3_2013_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0901306-FBFE-4CBA-9C48-9842184219A9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3_2013:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A06B6DD0-370E-4107-B4B7-0248317BB9A9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_1960_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EA0F116-7986-47A1-974A-E0F50376CA82"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+_1960:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "60D64C06-D141-49C7-956F-6FA3B108F752"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_with_lte_advanced_1961_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7C594D9-3193-4DAE-84C4-650E027A255D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+_with_lte_advanced_1961:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "59B147EE-718E-411B-A0F1-F077114236CC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E94C16E-94D9-4273-B8C8-BC57762F8367"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0A187D45-BB47-4667-ADFE-8B9E823F221B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17896CFB-0B7D-456A-8A82-A971C3B5F072"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "262D30D4-449E-47BB-9678-9F371B28DCF5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1979_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53FAAED8-ECEA-4D23-8DBC-572D02D321E8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1979:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2EE6A4AC-189F-4FF4-9249-BA5198526BE5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6C3A0E0-6485-411B-BC31-1A8A275CB034"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1951_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81AE1FA8-DFE2-4C84-AE82-1CCB3EB2D807"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1951:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "87E17267-FA93-4997-8D2D-8C0EB54BC932"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB6C780C-DDCE-447D-978C-57115EBBF4B9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6110417B-F51F-42B3-95F9-AD7D6398FED3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1953_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0E3E9CE-02B3-4CAC-B898-441206C0A9F5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1953:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D2F8D879-05EE-4C61-996C-C1A8D6692382"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DB5B208-C22B-4A1D-832C-29B693F35586"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2CD2054E-1098-4BEA-BA95-8430BF28192E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1959_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37A535B1-733C-4D0D-B278-36D78296D1CA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1959:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9BA4926B-3737-4E65-89D7-44993F87D68D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "82E9E481-0326-4229-A8A7-84DE0D095425"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "secure@microsoft.com"}
