CVE Catalog
CVE-2026-45642
LowCVSS 3.9Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
Risk Assessment
The organization may be exposed to spoofing of trusted devices or services, potentially compromising data integrity and authenticity in the Azure environment.
Recommendation
Apply patches provided by Microsoft for Azure Attestation and Device Health Attestation services. Also restrict physical access to devices.
Original NVD description (English source)
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.