CVE Catalog
CVE-2026-71331
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.45%
37th percentile - higher than 37% of all known CVEs
Summary
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Risk Assessment
Risk of remote code execution on Windows, which can lead to full system compromise.
Recommendation
Install the latest Windows security updates that include a fix for this vulnerability.
Other vulnerabilities in Windows Device Health Attestation
Original NVD description (English source)
Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

