Lucene search
+L

55 matches found

CVE
CVE
•added 2026/09/08 5:12 p.m.•62 views

CVE-2026-69443

CVE-2026-69443 is an out-of-bounds read in Windows Device Health Attestation (DHA) that allows an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning it is exploitable over the netw...

7.5CVSS5.7AI score0.01027EPSS
SaveExploits0References1Affected Software4
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-87472

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.01027EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•6 views

CVE-2026-69443: Out-of-bounds Read

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.01027EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/01 12:00 a.m.•12 views

The vulnerability of the Device Health Attestation (DHA) status-checking function in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Device Health Attestation DHA status check function in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS6.1AI score0.00542EPSS
SaveExploits0References2Affected Software8
Cvelist
Cvelist
•added 2026/08/11 5:07 p.m.•76 views

CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

8.1CVSS0.00707EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:07 p.m.•39 views

EUVD-2026-56771

Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network...

8.1CVSS5.5AI score0.00707EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:07 p.m.•44 views

CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

8.1CVSS0.00542EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/11 5:07 p.m.•20 views

CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

8.1CVSS7.5AI score0.00542EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•27 views

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

8.1CVSS7.8AI score0.00542EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•54 views

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

8.1CVSS7.7AI score0.00707EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•3 views

CVE-2026-71331: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

8.1CVSS7.8AI score0.00707EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•3 views

CVE-2026-66802: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

8.1CVSS7.8AI score0.00542EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•17 views

PT-2026-70780

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description An integer overflow or wraparound occurs in the Microsoft Azure Attestation service and Device...

8.1CVSS7.9AI score0.00707EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•20 views

PT-2026-70702

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description A race condition exists in the Microsoft Azure Attestation service and Device Health Attestation...

8.1CVSS8AI score0.00542EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•37 views

The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

4.6CVSS5.8AI score0.00372EPSS
SaveExploits0References2Affected Software20
RedhatCVE
RedhatCVE
•added 2026/06/10 9:04 p.m.•22 views

CVE-2026-45642

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack...

3.9CVSS5.4AI score0.00372EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/09 6:30 p.m.•28 views

EUVD-2026-35689

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack...

3.9CVSS5.4AI score0.00372EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/09 5:17 p.m.•31 views

CVE-2026-45642

Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack...

3.9CVSS0.00372EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/09 5:04 p.m.•92 views

CVE-2026-45642

Microsoft Azure Attestation service and Device Health Attestation Service are affected by improper input validation, allowing an authorized attacker to perform spoofing with a physical attack. CVSS 3.1, base score 3.9 (LOW); attack vector Physical, privileges required High, integrity impact High,...

3.9CVSS5.7AI score0.00372EPSS
SaveExploits0References1Affected Software13
Vulnrichment
Vulnrichment
•added 2026/06/09 5:04 p.m.•27 views

CVE-2026-45642 Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

...

3.9CVSS5.7AI score0.00372EPSS
SaveExploits0References1
Rows per page
Query Builder