TI-2026-72031 Aliases CVE-2026-69454 GHSA-fpqx-f7w2-3g5f

Out-of-bounds read in Microsoft Azure Attestation service discloses information

MEDIUM 41CWE-125Published 2026-10-13 · Updated 2026-10-31

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

Microsoft Azure Attestation service and Device Health Attestation Service from version 10.0.17763.0 before 10.0.17763.9376 are affected, among other Windows Server builds. An out-of-bounds read (CWE-125) lets an unauthorized attacker on the network read memory beyond the intended buffer, disclosing information. No authentication or user interaction is required, and the impact is limited to confidentiality.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Description from the CNA

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01094 65th percentileScored 2026-11-07

Fix Fixed Windows Server 2019 (Microsoft): 10.0.17763.9376Windows Server 2019 (Server Core installation) (Microsoft): 10.0.17763.9376+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Windows Server 2019	10.0.17763.0 to before 10.0.17763.9376	10.0.17763.9376	Patch available	CNA
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 to before 10.0.17763.9376	10.0.17763.9376	Patch available	CNA
Microsoft	Windows Server 2022	10.0.20348.0 to before 10.0.20348.5761	10.0.20348.5761	Patch available	CNA
Microsoft	Windows Server 2025	10.0.26100.0 to before 10.0.26100.33650	10.0.26100.33650	Patch available	CNA
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 to before 10.0.26100.33650	10.0.26100.33650	Patch available	CNA

Windows Server 2019 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9376 Fixed in 10.0.17763.9376 Patch available CNA
Windows Server 2019 (Server Core installation) VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9376 Fixed in 10.0.17763.9376 Patch available CNA
Windows Server 2022 VendorMicrosoft Affected 10.0.20348.0 to before 10.0.20348.5761 Fixed in 10.0.20348.5761 Patch available CNA
Windows Server 2025 VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33650 Fixed in 10.0.26100.33650 Patch available CNA
Windows Server 2025 (Server Core installation) VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33650 Fixed in 10.0.26100.33650 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_server_2022::::::::	—	—	Microsoft

cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:* Versions — — ·Microsoft

Remediation

Install the fixed Windows Server builds: 10.0.17763.9376 for Windows Server 2019 and its Server Core installation, 10.0.20348.5761 for Windows Server 2022, and 10.0.26100.33650 for Windows Server 2025 and its Server Core installation.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Fix · CNA Windows Server 2019 (Microsoft) Fixed in 10.0.17763.9376
Fix · CNA Windows Server 2019 (Server Core installation) (Microsoft) Fixed in 10.0.17763.9376
Fix · CNA Windows Server 2022 (Microsoft) Fixed in 10.0.20348.5761
Fix · CNA Windows Server 2025 (Microsoft) Fixed in 10.0.26100.33650
Fix · CNA Windows Server 2025 (Server Core installation) (Microsoft) Fixed in 10.0.26100.33650

Timeline

2026-10-13 Threatist record created from CVE-2026-69454
2026-10-13 Alias added: GHSA-fpqx-f7w2-3g5f
2026-10-13 CISA SSVC decision points changed
2026-10-14 Priority changed: MEDIUM → LOW
2026-10-14 Priority changed: LOW → MEDIUM

References

Patch 1

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

TI-2026-42212 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-37256 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-26194 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2026-16982 Microsoft SharePoint Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2025-33671 Microsoft SharePoint Server Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8

See all 18045 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences