Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-54120

Microsoft Surface Remote Code Execution Vulnerability

Description

Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Surface Management Services

  • -affected

References