← Database

CVE-2026-66802

HIGH CVSS: 8.1 Published: 2026-08-11 Modified: 2026-08-17

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows Server 2019Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2025Microsoft Windows 11 26H1

Weakness Type

CWE-362, CWE-416

References