CVE Catalog
CVE-2026-66802
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.35%
28th percentile - higher than 28% of all known CVEs
Summary
A race condition in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute code in the context of the DHA service, potentially leading to system compromise or privilege escalation.
Recommendation
Apply security updates provided by the vendor for Windows Device Health Attestation. Restrict network access to the DHA service.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.