This vulnerability (CVE-2026-48581) affects Microsoft Surface Go devices and is classified under CWE-1220, indicating insufficient granularity of access control. It enables an authorized local attacker to elevate privileges, potentially gaining higher-level access than intended. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required. Microsoft has released an official fix to remediate this vulnerability as detailed in their security update guide.

An authorized local attacker can exploit this vulnerability to elevate privileges on the affected Microsoft Surface Go device. This could lead to full system compromise, including unauthorized access to sensitive data, modification of system settings, and disruption of system availability. The vulnerability affects confidentiality, integrity, and availability with high impact.

An official fix is available from Microsoft to address this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-48581 for detailed patch information and deployment instructions.