VulnSocial

CVE-2026-48581Disclosure(microsoft / surface_go_2_1901)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft surface_go_2_1901 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.

microsoft CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1220

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • surface_go_2_1901
  • surface_go_2_1901_firmware
  • surface_go_2_1926
  • surface_go_2_1926_firmware

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
surface_go_2_1901surface_go_2_1901_firmwaresurface_go_2_1926surface_go_2_1926_firmwaresurface_go_2_1927surface_go_2_1927_firmwaresurface_go_3_1901surface_go_3_1901_firmwaresurface_go_3_1926surface_go_3_1926_firmware

1 version affected across 54 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-15: 107-1407-15
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-07-141
Disclosure1
2026-07-151
Patch1
Full discourse2 posts
  • Windows Forum@windowsforum
    Patch

    🪟 Surface firmware can hand local attackers higher privileges across multiple devices. Patch it—because “premium hardware” shouldn’t include a complimentary escalation path. https://windowsforum.com/threads/cve-2026-48581-patch-surface-firmware-privilege-escalation.438321/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSurface #PrivilegeEscalation #FirmwareSecurity #Cve202648581 https://t.co/Pd8kjsruu4

    Post summary

    The post announces the availability of a patch for CVE‑2026‑48581, which relates to firmware‑based privilege escalation on Microsoft Surface devices, and urges users to apply the patch.

    0000015
    1.2K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting Microsoft Surface Go and other products (CVE-2026-48581) https://vuldb.com/vuln/378400

    Post summary

    A new vulnerability, CVE‑2026‑48581, impacting Microsoft Surface Go and other products has been added to the vuldb.com database.

    00000100
    2.3K followersView on X
CPE platform detail54 entries

54 of 54 entries

PartVendorProductVersionTarget SWTarget HW
HWmicrosoftsurface_go_2_1901---
OSmicrosoftsurface_go_2_1901_firmware---
HWmicrosoftsurface_go_2_1926---
OSmicrosoftsurface_go_2_1926_firmware---
HWmicrosoftsurface_go_2_1927---
OSmicrosoftsurface_go_2_1927_firmware---
HWmicrosoftsurface_go_3_1901---
OSmicrosoftsurface_go_3_1901_firmware---
HWmicrosoftsurface_go_3_1926---
OSmicrosoftsurface_go_3_1926_firmware---
HWmicrosoftsurface_go_3_2022---
OSmicrosoftsurface_go_3_2022_firmware---
HWmicrosoftsurface_hub---
HWmicrosoftsurface_hub_2s---
HWmicrosoftsurface_hub_2s_85---
OSmicrosoftsurface_hub_2s_85_firmware---
OSmicrosoftsurface_hub_2s_firmware---
HWmicrosoftsurface_hub_3_50---
OSmicrosoftsurface_hub_3_50_firmware---
HWmicrosoftsurface_hub_3_85---
OSmicrosoftsurface_hub_3_85_firmware---
OSmicrosoftsurface_hub_firmware---
HWmicrosoftsurface_laptop_4_1950---
OSmicrosoftsurface_laptop_4_1950_firmware---
HWmicrosoftsurface_laptop_4_1951---
OSmicrosoftsurface_laptop_4_1951_firmware---
HWmicrosoftsurface_laptop_4_1952---
OSmicrosoftsurface_laptop_4_1952_firmware---
HWmicrosoftsurface_laptop_4_1953---
OSmicrosoftsurface_laptop_4_1953_firmware---
HWmicrosoftsurface_laptop_4_1958---
OSmicrosoftsurface_laptop_4_1958_firmware---
HWmicrosoftsurface_laptop_4_1959---
OSmicrosoftsurface_laptop_4_1959_firmware---
HWmicrosoftsurface_laptop_4_1978---
OSmicrosoftsurface_laptop_4_1978_firmware---
HWmicrosoftsurface_laptop_4_1979---
OSmicrosoftsurface_laptop_4_1979_firmware---
HWmicrosoftsurface_laptop_go_1943---
OSmicrosoftsurface_laptop_go_1943_firmware---
HWmicrosoftsurface_laptop_go_2_2013---
OSmicrosoftsurface_laptop_go_2_2013_firmware---
HWmicrosoftsurface_laptop_go_3_2013---
OSmicrosoftsurface_laptop_go_3_2013_firmware---
HWmicrosoftsurface_pro_7\+_1960---
OSmicrosoftsurface_pro_7\+_1960_firmware---
HWmicrosoftsurface_pro_7\+_with_lte_advanced_1961---
OSmicrosoftsurface_pro_7\+_with_lte_advanced_1961_firmware---
HWmicrosoftsurface_pro_8_1983---
OSmicrosoftsurface_pro_8_1983_firmware---
HWmicrosoftsurface_pro_8_for_business_1983---
OSmicrosoftsurface_pro_8_for_business_1983_firmware---
HWmicrosoftsurface_pro_8_for_business_with_lte_advanced_1982---
OSmicrosoftsurface_pro_8_for_business_with_lte_advanced_1982_firmware---

Explore more

Back to dashboardmicrosoft CVEssurface_go_2_1901 vulnerabilities