CVE Catalog
CVE-2026-54120
CriticalCVSS 9.9Exploitation Probability (EPSS)
Elevated risk0.96%
61th percentile - higher than 61% of all known CVEs
Summary
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker can execute arbitrary code on the vulnerable Surface device, potentially leading to privilege escalation and system integrity compromise.
Recommendation
Apply the security update provided by Microsoft for affected versions of Microsoft Surface.
Other vulnerabilities in Microsoft Surface
Original NVD description (English source)
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS