Skip to content
OpenAdvisories
High MSRC-CVE-2026-45642 1 CVE

Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability

Published Jun 9, 2026 · Updated Jun 9, 2026

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How do I protect myself from this vulnerability?
Microsoft has already deployed a service-side fix for this vulnerability in Azure Attestation. No customer patching or update installation is required.
Use the latest supported attestation policy
No action is required if you are already using the current recommended policy version (1.2) for Azure Attestation.
Do not rely on certain attestation events for security decisions
Customers should not use the following events for security assertions in attestation policies:
These events can no longer be considered trustworthy signals for attestation evaluation.
If your current attestation policy relies on these events for security enforcement, update it to remove them., You may still reference these events for diagnostic or informational purposes only, but they should not be used to make trust decisions.
If needed, the above events are still available in the allEvents claim., However, Microsoft does not guarantee the integrity or trustworthiness of data within these events.

Security updates
10.0.17763.8880 — https://support.microsoft.com/help/5094123
10.0.20348.5256 — https://support.microsoft.com/help/5094128
10.0.19044.7417 — https://support.microsoft.com/help/5094127
10.0.26100.32995 — https://support.microsoft.com/help/5094125
10.0.26200.8655 — https://support.microsoft.com/help/5094126
10.0.22631.7219 — https://support.microsoft.com/help/5093998
10.0.28000.2269 — https://support.microsoft.com/help/5095051
10.0.14393.9234 — https://support.microsoft.com/help/5094122
6.2.9200.26132 — https://support.microsoft.com/help/5094042
6.3.9600.23228 — https://support.microsoft.com/help/5094041

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References