Vulnerabilities CVE-2022-30190

CVE-2022-30190

High

Open

KEV

TLP:CLEAR

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Microsoft — Windows — A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

Details

CVSS Score: 7.8
EPSS Score ⓘ: 99.37%

99.9th percentile
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Confidence: 100%
Published: Jun 1, 2022
Last Modified: Aug 6, 2026
CISA KEV
Date Added: Jun 14, 2022
Patch Due: Jul 5, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.