CVE-2026-69454

EUVD-2026-99900
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 60.93%
Windows Releases
Platform
Version
Windows Server 2019
Server Core
KB5126651
Standard
KB5126651
Windows Server 2022
Server Core
KB5126655
Standard
KB5126655
Windows Server 2025
Server Core
KB5126646
Standard
KB5126646
Common Weakness Enumeration
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69454