CVE-2022-30190

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190Vendor Advisory
• http://packetstormsecurity.com/files/167438/Microsoft-Office-Word-MSDTJS-Code-Execution.htmlExploit
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30190Patch
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-30190US Government Resource