CVE-2026-69443

EUVD-2026-73133
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 63.32%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10_1809
𝑥
< 10.0.17763.9245
microsoftwindows_server_2019
𝑥
< 10.0.17763.9245
microsoftwindows_server_2022
𝑥
< 10.0.20348.5622
microsoftwindows_server_2025
𝑥
< 10.0.26100.33438
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1809 (x64, x86)
KB5122876
Windows Server 2019
Server Core
KB5122876
Standard
KB5122876
Windows Server 2022
Server Core
KB5122882
Standard
KB5122882
Windows Server 2025
Server Core
KB5122871
Standard
KB5122871
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69443