CVE-2022-30190
KEV · RansomwareMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- Windows
- Date added
- Jun 14, 2022
- Due date
- Jul 5, 2022
- Known ransomware use
- Known
- CWEs
- CWE-610
Description
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
Required action
Apply updates per vendor instructions.