BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2022-30190Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.

7.8 HIGHEPSS 99.16%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
7.8HIGH3.1microsoft (CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8HIGH3.1microsoft (CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9.3HIGH2.0NVDAV:N/AC:M/Au:N/C:C/I:C/A:C

CISA required action

⚡ Known exploited · remediation due Jul 5, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2022-30190
Status
Analyzed
Assigner (CNA)
microsoft
Published
Jun 1, 2022
Last modified
2026-08-06 05:16 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:45 UTC.