CVE-2026-69443

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73133

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

Windows Device Health Attestation (DHA) Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker who operates remotely to execute arbitrary code...

CVE-2026-71331

The CVE-2026-71331 entry describes an Integer overflow or wraparound in the Microsoft Azure Attestation service and the Device Health Attestation Service . The underlying issue is a numeric overflow that can be triggered by an attacker over a network, allowing a remote code execution scenario. Af...

CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...