Microsoft - RCE (CVE-2022-30190)
Description
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application.
psychologyCrowdSec Analysis
CVE-2022-30190 is a vulnerability in Microsoft products that allows remote code execution via the MSDT URL protocol.
CrowdSec has been tracking this vulnerability and its exploits since 21st of July 2022.
CrowdSec has not observed any significant exploitation activity targeting CVE-2022-30190 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
This vulnerability is exploited by crafting a malicious document that triggers the MSDT URL protocol, allowing the attacker to execute arbitrary code.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2022-06-01 |
| CISA KEV | 2022-06-14 |
| CISA Remediation Deadline | 2022-07-05 |
| Rule Released | 2022-07-21 |
| CrowdSec First Seen | 2026-09-21 |