TI-2026-72035 Aliases CVE-2026-69577 GHSA-7h6w-rjrv-8pcj

Out-of-bounds read in Microsoft Azure Attestation service

MEDIUM 41CWE-125Published 2026-10-13 · Updated 2026-10-31

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

Microsoft Windows Server 2019, 2022 and 2025 are affected from 10.0.17763.0 before 10.0.17763.9376, from 10.0.20348.0 before 10.0.20348.5761, and from 10.0.26100.0 before 10.0.26100.33650. An out-of-bounds read (CWE-125) in the Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network without user interaction.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Description from the CNA

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01071 65th percentileScored 2026-11-07

Fix Fixed Windows Server 2019 (Microsoft): 10.0.17763.9376Windows Server 2019 (Server Core installation) (Microsoft): 10.0.17763.9376+3 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Microsoft	Windows Server 2019	10.0.17763.0 to before 10.0.17763.9376	10.0.17763.9376	Patch available	CNA
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0 to before 10.0.17763.9376	10.0.17763.9376	Patch available	CNA
Microsoft	Windows Server 2022	10.0.20348.0 to before 10.0.20348.5761	10.0.20348.5761	Patch available	CNA
Microsoft	Windows Server 2025	10.0.26100.0 to before 10.0.26100.33650	10.0.26100.33650	Patch available	CNA
Microsoft	Windows Server 2025 (Server Core installation)	10.0.26100.0 to before 10.0.26100.33650	10.0.26100.33650	Patch available	CNA

Windows Server 2019 VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9376 Fixed in 10.0.17763.9376 Patch available CNA
Windows Server 2019 (Server Core installation) VendorMicrosoft Affected 10.0.17763.0 to before 10.0.17763.9376 Fixed in 10.0.17763.9376 Patch available CNA
Windows Server 2022 VendorMicrosoft Affected 10.0.20348.0 to before 10.0.20348.5761 Fixed in 10.0.20348.5761 Patch available CNA
Windows Server 2025 VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33650 Fixed in 10.0.26100.33650 Patch available CNA
Windows Server 2025 (Server Core installation) VendorMicrosoft Affected 10.0.26100.0 to before 10.0.26100.33650 Fixed in 10.0.26100.33650 Patch available CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:o:microsoft:windows_server_2019:::::::x64:*	before 10.0.17763.9376	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2022:::::::x64:*	before 10.0.20348.5761	Vulnerable	Microsoft
cpe:2.3:o:microsoft:windows_server_2025:::::::x64:*	before 10.0.26100.33650	Vulnerable	Microsoft

cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:x64:* Versions before 10.0.17763.9376 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:* Versions before 10.0.20348.5761 Vulnerable ·Microsoft
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:* Versions before 10.0.26100.33650 Vulnerable ·Microsoft

Remediation

Install the fixed versions: Windows Server 2019 and Windows Server 2019 (Server Core installation) 10.0.17763.9376, Windows Server 2022 10.0.20348.5761, and Windows Server 2025 and Windows Server 2025 (Server Core installation) 10.0.26100.33650.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Fix · CNA Windows Server 2019 (Microsoft) Fixed in 10.0.17763.9376
Fix · CNA Windows Server 2019 (Server Core installation) (Microsoft) Fixed in 10.0.17763.9376
Fix · CNA Windows Server 2022 (Microsoft) Fixed in 10.0.20348.5761
Fix · CNA Windows Server 2025 (Microsoft) Fixed in 10.0.26100.33650
Fix · CNA Windows Server 2025 (Server Core installation) (Microsoft) Fixed in 10.0.26100.33650

Timeline

2026-10-13 Threatist record created from CVE-2026-69577
2026-10-13 Alias added: GHSA-7h6w-rjrv-8pcj
2026-10-13 CISA SSVC decision points changed
2026-10-14 Priority changed: MEDIUM → LOW
2026-10-14 Priority changed: LOW → MEDIUM

References

Patch 1

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

TI-2026-26194 Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2025-36863 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability KEVCVSS 3.1CRITICAL 9.8
TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
TI-2020-01310 Improper input validation in Microsoft Windows Server KEVCVSS 3.1CRITICAL 10.0
TI-2026-73128 Windows Shell Security Feature Bypass Vulnerability KEVCVSS 3.1HIGH 8.8
TI-2026-17367 MSHTML Framework Security Feature Bypass Vulnerability KEVCVSS 3.1HIGH 8.8

See all 6455 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences