CVE-2026-71331Published

Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

cve-program · CVE-2026-71331

Published

Windows 10 Version 1809

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows 10 Version 1809",
                    "platforms": [
                        "32-bit Systems",
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9121",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2019

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2019",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9121",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2019 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2019 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.17763.0",
                            "lessThan": "10.0.17763.9121",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2022

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2022",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.20348.0",
                            "lessThan": "10.0.20348.5499",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2025

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2025",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.26100.0",
                            "lessThan": "10.0.26100.33296",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Windows Server 2025 (Server Core installation)

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "Windows Server 2025 (Server Core installation)",
                    "platforms": [
                        "x64-based Systems"
                    ],
                    "versions": [
                        {
                            "version": "10.0.26100.0",
                            "lessThan": "10.0.26100.33296",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON