attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
Microsoft Windows Server 2025, Microsoft Windows Server 2019, and Microsoft Windows Server 2022
Classified as
CWE-125 (Out-of-bounds Read)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Microsoft
Windows Server 2025
Microsoft
Windows Server 2019
Microsoft
Windows Server 2022
Subsystems
OT Supporting Infrastructure
Sectors
All Sectors
What to Know
Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.
What to Do
Monitor Microsoft's web page for any future patch releases.