CVE-2026-45642: Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
CSIRTS triage
- What
- Improper input validation allows an authorized attacker to perform spoofing with a physical attack.
- Who is affected
- Deployments of Microsoft Azure Attestation service and Device Health Attestation Service.
- Urgency
- Remediation is low urgency due to the low severity and lack of exploitation.
- Action
- No immediate action required.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Azure Attestation service
Get an email when a new Azure Attestation service advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45642
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-456420.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-45642 | coverage & exploitation status | NVD · CVE.org |
More from Microsoft Security Response Center
- highCVE-2026-42900: Microsoft Windows App Store Elevation of Privilege Vulnerability2026-07-14
- mediumCVE-2026-59926: Mistune: XSS via unescaped class option in Admonition directive2026-07-14
- mediumCVE-2026-55003: Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability2026-07-14
- unknownCVE-2026-13860: Chromium: CVE-2026-13860 Incorrect security UI in Autofill2026-07-14
- highCVE-2026-57992: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability2026-07-14