https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T20:28:33.433668+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-66802 CVE-2026-66802 — Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability 2026-09-30T20:28:33.448441+00:00

Affected: Microsoft Windows 10 Version 1809, Microsoft Windows 11 version 26H1, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation), Microsoft Windows Server 2022, Microsoft Windows Server 2025, Microsoft Windows Server 2025 (Server Core installation)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.