CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-347137.8/HIGHEPSS 67.8%CISA KEV
2022-08-09

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-34713, Dogwalk)

[Affected Scope] Microsoft Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 supporting the MSDT protocol

[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system when a user opens a specially crafted '.diagcab' file

[Mitigation] Apply the official Microsoft security updates immediately, or disable the MSDT URL protocol handler as a temporary workaround

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse