H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-06-14
Last seen2022-06-14

Confidence

—

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productMicrosoft Windows
Added2022-06-14
Due date2022-07-05
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2022-30190
open
cwe
CWE-610
open