Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-48581

Surface Broker SDMA Elevation of Privilege Vulnerability

Description

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Surface Go

  • -affected

Microsoft Microsoft Surface Hub

  • -affected

Microsoft Microsoft Surface Laptop Go

  • -affected

Microsoft Microsoft Surface Laptop Go 3

  • -affected

Microsoft Microsoft Surface Pro

  • -affected

Microsoft Microsoft Surface Pro 8

  • -affected

Microsoft Surface Laptop 4 with AMD Processor

  • -affected

Microsoft Surface Laptop 4 with Intel Processor

  • -affected

Microsoft Surface Windows Dev Kit

  • -affected

References