CVE-2026-48581
High
Description
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Microsoft Surface Go 2 1901 Firmware
PublishedJul 14, 2026
First seenJul 14, 2026
Weakness typeCWE-1220CWE-1220
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft surface_go_2_1901_firmware | No range specified | — |
| microsoft surface_go_2_1926_firmware | No range specified | — |
| microsoft surface_go_2_1927_firmware | No range specified | — |
| microsoft surface_go_3_1901_firmware | No range specified | — |
| microsoft surface_go_3_1926_firmware | No range specified | — |
| microsoft surface_go_3_2022_firmware | No range specified | — |
| microsoft surface_hub_firmware | No range specified | — |
| microsoft surface_hub_2s_firmware | No range specified | — |
| microsoft surface_hub_2s_85_firmware | No range specified | — |
| microsoft surface_hub_3_50_firmware | No range specified | — |
| microsoft surface_hub_3_85_firmware | No range specified | — |
| microsoft surface_laptop_go_1943_firmware | No range specified | — |
| microsoft surface_laptop_go_2_2013_firmware | No range specified | — |
| microsoft surface_laptop_go_3_2013_firmware | No range specified | — |
| microsoft surface_pro_7\+_1960_firmware | No range specified | — |
| microsoft surface_pro_7\+_with_lte_advanced_1961_firmware | No range specified | — |
| microsoft surface_pro_8_1983_firmware | No range specified | — |
| microsoft surface_pro_8_for_business_1983_firmware | No range specified | — |
| microsoft surface_pro_8_for_business_with_lte_advanced_1982_firmware | No range specified | — |
| microsoft surface_laptop_4_1979_firmware | No range specified | — |
| microsoft surface_laptop_4_1950_firmware | No range specified | — |
| microsoft surface_laptop_4_1951_firmware | No range specified | — |
| microsoft surface_laptop_4_1952_firmware | No range specified | — |
| microsoft surface_laptop_4_1953_firmware | No range specified | — |
| microsoft surface_laptop_4_1958_firmware | No range specified | — |
| microsoft surface_laptop_4_1959_firmware | No range specified | — |
| microsoft surface_laptop_4_1978_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.