Executive brief
Windows Device Health Attestation (DHA) is a Windows security feature that verifies device integrity and compliance with security policies. A race condition in DHA allows an attacker on the network to execute arbitrary code without authorization, potentially compromising the device and gaining control over its security posture.
Technical details
This vulnerability is a race condition (CWE-362) in Windows Device Health Attestation caused by improper synchronization when multiple processes access shared resources concurrently. The flaw allows an unauthenticated network attacker to trigger a code execution path by exploiting the timing window between resource access and validation. The attack requires network connectivity but no user interaction or prior authentication. Successful exploitation results in arbitrary code execution with system privileges, potentially enabling full device compromise.
Affected products
- Microsoft Windows Device Health Attestation
Timeline
- 2026-08-11: disclosed