CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (CVE-2022-34713, Dogwalk)
[Affected Scope] Microsoft Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 supporting the MSDT protocol
[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system when a user opens a specially crafted '.diagcab' file
[Mitigation] Apply the official Microsoft security updates immediately, or disable the MSDT URL protocol handler as a temporary workaround
Microsoft Windows MSDT Remote Code Execution Vulnerability (Follina, CVE-2022-30190) Security Advisory
[Affected Scope] Windows Operating Systems and Microsoft Office applications utilizing the Microsoft Support Diagnostics Tool (MSDT) protocol
[Impact] Remote attackers can execute arbitrary code with the privileges of the calling application, potentially taking full control of the system
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the MSDT URL protocol handler via registry modification