Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-96196
Summary
Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.
Products covered
Surface Windows Dev Kit
Microsoft Surface Hub
Microsoft Surface Laptop Go 2
Surface Laptop 4 with AMD Processor
Microsoft Surface Hub 2S
Microsoft Surface Go 2
Surface Laptop 4 with Intel Processor
Microsoft Surface Pro 8
Show 5 more products
Microsoft Surface Laptop Go 3
Microsoft Surface Laptop Go
Microsoft Surface Go 3
Microsoft Surface Pro 7+
Microsoft Surface Hub 3
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.