New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KEV Release: 2022-06-14 #1

Open

hrbrmstr opened this issue Jun 18, 2022 · 0 comments

Owner

hrbrmstr commented Jun 18, 2022

KEV Release: 2022-06-14

1 CVE in this release.

CVE-2022-30190: (Microsoft:Windows) Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability :: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
Additional Information
- CVSS 7.8
- Severity: HIGH
- Attack Vector: LOCAL
- Attack Complexity: LOW
- Privileges Required: NONE
- User Interaction: REQUIRED
- Impact: 5.9
- CWE: NVD-CWE-noinfo
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS: 0.695890000 / 0.990780000
- In The Wild: https://inthewild.io/vuln/CVE-2022-30190

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment