CVE Catalog

CVE-2026-71331

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.45%

37th percentile - higher than 37% of all known CVEs

Summary

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Risk Assessment

Risk of remote code execution on Windows, which can lead to full system compromise.

Recommendation

Install the latest Windows security updates that include a fix for this vulnerability.

Original NVD description (English source)

Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS