Microsoft disclosed CVE-2026-33828 on June 9, 2026, as a critical Windows Device Health Attestation elevation-of-privilege vulnerability that can let a locally authorized attacker cross a trust boundary and gain SYSTEM privileges on affected Windows clients and servers. The oddity is not the...