Remote code execution via integer overflow

Integer overflow in Windows Device Health Attestation on supported Microsoft Windows releases allows remote attackers to execute code. Microsoft has disclosed only that Azure Attestation and Device Health Attestation mishandle numeric values during network-reachable request processing; no public advisory or patch diff names the affected function, parser, or field. Exposure requires the attestation service to be reachable, and the published CVSS vector shows unauthenticated network attack with high complexity rather than a client-side trigger or a documented local privilege boundary break.