Follina: 0-day Windows MSDT Vulnerability (CVE-2022-30190) Exploited In The Wild

UPDATE June 14th, 2022: Updated patch status for CVE-2022-30190.UPDATE May 31st, 2022: Updated the coverage section with protection by the FortiGuard Content DIsarm and Reconstruction (CDR) service.FortiGuard Labs is aware that a 0-day vulnerability in Microsoft Support Diagnostic Tool is being exploited in the wild. The first sample that exploits the vulnerability appeared on VirusTotal on April 12th, 2022. Assigned CVE-2022-30190, successful exploitation allows an attacker to run arbitrary code with the privileges of the calling application. The attacker can …

cve cve-2022-30190 follina msdt vulnerability windows