Security Update Available for Microsoft Vulnerability "Follina" (CVE-2022-30190)
CVE-2022-30190, also known as "Follina", is a vulnerability in Microsoft Diagnostic Tool (MSDT) that allows remote code execution via multiple applications such as Microsoft Word
Summary
CVE-2022-30190, also known as "Follina", is a vulnerability in Microsoft Diagnostic Tool (MSDT) that allows remote code execution via multiple applications such as Microsoft Word
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
The vulnerability known as CVE-2022-30190 or "Follina" was publicly disclosed in late May 2022. Microsoft formally acknowledged the vulnerability and released a blog detailing workarounds until an update could be issued. Several Advanced Persistent Threat (APT) groups were seen exploiting this vulnerability in May and June 2022.
This vulnerability evades common protections associated with Office documents, requires minimal user interaction, and could be used by a remote attacker to execute arbitrary code, escalate privileges to fully take over a machine, or deploy additional malware.
Remediation advice
Affected organisations are strongly encouraged to read Cyber Alert CC-4109 regarding the Microsoft June 2022 monthly updates and the Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability page for CVE-2022-30190 and apply the relevant updates as soon as practicable.
Definitive source of threat updates
CVE Vulnerabilities
Last edited: 15 June 2022 1:26 pm