{"id":"CVE-2026-48581","aliases":["EUVD-2026-43794","GHSA-59xf-77x2-pv8f"],"status":"published","title":"Surface Broker SDMA Elevation of Privilege Vulnerability","description":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00298,"percentile":0.22653,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1220"],"published":"2026-07-14T17:05:46Z","modified":"2026-11-01T17:33:27Z","products":[{"vendor":"microsoft","product":"microsoft surface go"},{"vendor":"microsoft","product":"microsoft surface hub"},{"vendor":"microsoft","product":"microsoft surface laptop go"},{"vendor":"microsoft","product":"microsoft surface laptop go 3"},{"vendor":"microsoft","product":"microsoft surface pro"},{"vendor":"microsoft","product":"microsoft surface pro 8"},{"vendor":"microsoft","product":"surface laptop 4 with amd processor"},{"vendor":"microsoft","product":"surface laptop 4 with intel processor"},{"vendor":"microsoft","product":"surface windows dev kit"},{"vendor":"microsoft","product":"surface_go_2_1901_firmware"},{"vendor":"microsoft","product":"surface_go_2_1926_firmware"},{"vendor":"microsoft","product":"surface_go_2_1927_firmware"},{"vendor":"microsoft","product":"surface_go_3_1901_firmware"},{"vendor":"microsoft","product":"surface_go_3_1926_firmware"},{"vendor":"microsoft","product":"surface_go_3_2022_firmware"},{"vendor":"microsoft","product":"surface_hub_2s_85_firmware"},{"vendor":"microsoft","product":"surface_hub_2s_firmware"},{"vendor":"microsoft","product":"surface_hub_3_50_firmware"},{"vendor":"microsoft","product":"surface_hub_3_85_firmware"},{"vendor":"microsoft","product":"surface_hub_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1950_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1951_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1952_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1953_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1958_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1959_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1978_firmware"},{"vendor":"microsoft","product":"surface_laptop_4_1979_firmware"},{"vendor":"microsoft","product":"surface_laptop_go_1943_firmware"},{"vendor":"microsoft","product":"surface_laptop_go_2_2013_firmware"},{"vendor":"microsoft","product":"surface_laptop_go_3_2013_firmware"},{"vendor":"microsoft","product":"surface_pro_7\\+_1960_firmware"},{"vendor":"microsoft","product":"surface_pro_7\\+_with_lte_advanced_1961_firmware"},{"vendor":"microsoft","product":"surface_pro_8_1983_firmware"},{"vendor":"microsoft","product":"surface_pro_8_for_business_1983_firmware"},{"vendor":"microsoft","product":"surface_pro_8_for_business_with_lte_advanced_1982_firmware"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581","tags":["vendor-advisory","patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48581"},{"url":"https://github.com/advisories/GHSA-59xf-77x2-pv8f"}],"sources":{"cve":[{"id":"CVE-2026-48581","title":"Surface Broker SDMA Elevation of Privilege Vulnerability","description":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-07-14T17:05:46.776Z","modified":"2026-11-01T17:33:27.068Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T13:50:49.872037Z"}],"euvd":[{"id":"EUVD-2026-43794","description":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-07-14T17:05:46Z","modified":"2026-11-01T17:33:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T16:58:48.785826Z"}],"ghsa":[{"id":"GHSA-59xf-77x2-pv8f","title":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to...","description":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-07-14T18:31:59Z","modified":"2026-07-14T18:32:06Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T15:09:28.277582Z"}],"nvd":[{"id":"CVE-2026-48581","description":"Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.","status":"published","published":"2026-07-14T17:16:50.767Z","modified":"2026-07-24T13:37:22.08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-1220"],"updated_at":"2026-11-02T14:12:29.114188Z"}]}}