CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-06-01
Microsoft Windows MSDT Remote Code Execution Vulnerability (Follina, CVE-2022-30190) Security Advisory
[Affected Scope] Windows Operating Systems and Microsoft Office applications utilizing the Microsoft Support Diagnostics Tool (MSDT) protocol
[Impact] Remote attackers can execute arbitrary code with the privileges of the calling application, potentially taking full control of the system
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the MSDT URL protocol handler via registry modification