Surface Management Services
Monthly
Remote code execution in Microsoft Surface Management Services exposes networks to exploitation by authenticated low-privilege users who can send malformed input over the network to trigger arbitrary code execution. Affecting all tracked versions per CPE cpe:2.3:a:microsoft:surface_management_services:*:*:*:*:*:*:*:*, the vulnerability carries a CVSS 8.8 High rating with full confidentiality, integrity, and availability impact. No public exploits identified at time of analysis and EPSS at 0.71% suggests low current exploitation probability; the vulnerability is absent from the CISA KEV catalog.
Remote code execution in Microsoft Surface Management Services exposes networks to exploitation by authenticated low-privilege users who can send malformed input over the network to trigger arbitrary code execution. Affecting all tracked versions per CPE cpe:2.3:a:microsoft:surface_management_services:*:*:*:*:*:*:*:*, the vulnerability carries a CVSS 8.8 High rating with full confidentiality, integrity, and availability impact. No public exploits identified at time of analysis and EPSS at 0.71% suggests low current exploitation probability; the vulnerability is absent from the CISA KEV catalog.