SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-48581

HIGH · CVSS 7.8 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

Microsoft Surface devices are vulnerable due to insufficient granularity in access control, enabling authorized attackers to escalate their privileges locally. This high-severity flaw (CVSS 7.8) poses a significant risk to the integrity of user data and system operations. Organizations utilizing Microsoft Surface devices should prioritize remediation efforts to mitigate potential exploitation.

CVE
CVE-2026-48581
Severity
HIGH
CVSS
7.8
EPSS
0.21%
Microsoft

Original NVD Description

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)