CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
Other sources
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
— CISA
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.23736Patch KB5014741 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.25984Patch KB5014742 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20402Patch KB5014746 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.20402Patch KB5014738 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.5192Patch KB5014702 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.19325Patch KB5014710 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.1766Patch KB5014699 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.739Patch KB5014697 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19042.1766Patch KB5014699 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.1766Patch KB5014699 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.770Patch KB5014678 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.3046Patch KB5014692
Event History
Frequently Asked Questions
What is the severity of CVE-2022-30190?
CVE-2022-30190 has been assigned a high severity rating due to its potential for remote code execution.
How do I fix CVE-2022-30190?
To mitigate CVE-2022-30190, ensure that your system is updated with the latest patches provided by Microsoft.
Which applications are affected by CVE-2022-30190?
CVE-2022-30190 primarily affects applications that utilize the Microsoft Support Diagnostic Tool (MSDT) through the URL protocol.
Can CVE-2022-30190 be exploited remotely?
Yes, CVE-2022-30190 can be exploited remotely if a user opens a specially crafted file in an affected application.
What versions of Windows are vulnerable to CVE-2022-30190?
CVE-2022-30190 affects various Windows versions, including Windows 10, Windows 11, Windows Server 2022, and earlier versions.