Back to the CVE list
CVE-2026-48581

Surface Broker SDMA Elevation of Privilege Vulnerability

CVSS score

7.8

EPSS probability

%0.3

Risk score

0.0

Published

3 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Official patch verified

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-48581 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-48581 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1microsoftMicrosoft Surface Go View
2microsoftMicrosoft Surface Hub View
3microsoftMicrosoft Surface Laptop Go View
4microsoftMicrosoft Surface Laptop Go 3 View
5microsoftMicrosoft Surface Pro View
6microsoftMicrosoft Surface Pro 8 View
7microsoftSurface Laptop 4 with AMD Processor View
8microsoftSurface Laptop 4 with Intel Processor View
9microsoftSurface Windows Dev Kit View
10microsoftsurface go 2 1901 firmware View
11microsoftsurface go 2 1901 View
12microsoftsurface go 2 1926 firmware View
13microsoftsurface go 2 1926 View
14microsoftsurface go 2 1927 firmware View
15microsoftsurface go 2 1927 View
16microsoftsurface go 3 1901 firmware View
17microsoftsurface go 3 1901 View
18microsoftsurface go 3 1926 firmware View
19microsoftsurface go 3 1926 View
20microsoftsurface go 3 2022 firmware View
21microsoftsurface go 3 2022 View
22microsoftsurface hub firmware View
23microsoftsurface hub View
24microsoftsurface hub 2s firmware View
25microsoftsurface hub 2s View
26microsoftsurface hub 2s 85 firmware View
27microsoftsurface hub 2s 85 View
28microsoftsurface hub 3 50 firmware View
29microsoftsurface hub 3 50 View
30microsoftsurface hub 3 85 firmware View
31microsoftsurface hub 3 85 View
32microsoftsurface laptop go 1943 firmware View
33microsoftsurface laptop go 1943 View
34microsoftsurface laptop go 2 2013 firmware View
35microsoftsurface laptop go 2 2013 View
36microsoftsurface laptop go 3 2013 firmware View
37microsoftsurface laptop go 3 2013 View
38microsoftsurface pro 7+ 1960 firmware View
39microsoftsurface pro 7+ 1960 View
40microsoftsurface pro 7+ with lte advanced 1961 firmware View
41microsoftsurface pro 7+ with lte advanced 1961 View
42microsoftsurface pro 8 1983 firmware View
43microsoftsurface pro 8 1983 View
44microsoftsurface pro 8 for business 1983 firmware View
45microsoftsurface pro 8 for business 1983 View
46microsoftsurface pro 8 for business with lte advanced 1982 firmware View
47microsoftsurface pro 8 for business with lte advanced 1982 View
48microsoftsurface laptop 4 1979 firmware View
49microsoftsurface laptop 4 1979 View
50microsoftsurface laptop 4 1950 firmware View
51microsoftsurface laptop 4 1950 View
52microsoftsurface laptop 4 1951 firmware View
53microsoftsurface laptop 4 1951 View
54microsoftsurface laptop 4 1952 firmware View
55microsoftsurface laptop 4 1952 View
56microsoftsurface laptop 4 1953 firmware View
57microsoftsurface laptop 4 1953 View
58microsoftsurface laptop 4 1958 firmware View
59microsoftsurface laptop 4 1958 View
60microsoftsurface laptop 4 1959 firmware View
61microsoftsurface laptop 4 1959 View
62microsoftsurface laptop 4 1978 firmware View
63microsoftsurface laptop 4 1978 View
Total affected vendors: 1|Products: 63

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.8CVSS 3.x—CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CMicrosoft MSRC
7.8CVSS V31HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD
7.8CVSS V3_1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch verified

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

cvelist

Surface Broker SDMA Elevation of Privilege Vulnerability

Open source
reference

Surface Broker SDMA Elevation of Privilege Vulnerability

Open source
Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-48581 is associated with the following CWEs:

CWE-1220: Common Weakness Enumeration Entry CWE-1220

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-48581 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsLow
UserGerekmiyor

Official Sources and Advisories

Surface Broker SDMA Elevation of Privilege Vulnerabilitypatch

CVSS Vector Radar Chart

7.8 / 10
Attack VectorLocalComplexityLowPrivilegesLowUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama doğrulandı

2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Follow the vendor

M
microsoft logo
microsoft

Weakness Type (CWE & CAPEC)

CWE-1220

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48581"