CVE-2026-69443

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73133

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

Windows Device Health Attestation (DHA) Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker who operates remotely to execute arbitrary code...

CVE-2026-71331

The CVE-2026-71331 entry describes an Integer overflow or wraparound in the Microsoft Azure Attestation service and the Device Health Attestation Service . The underlying issue is a numeric overflow that can be triggered by an attacker over a network, allowing a remote code execution scenario. Af...

CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2026-66802: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...