As cited
Copy frozen at (site build).
vulnerabilities
Vulnerability summary: Follina, CVE-2022-30190
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Vulnerability summary: Follina, CVE-2022-30190
CVE-2022-30190, known as Follina, is a vulnerability in Microsoft Support Diagnostic Tool (MSDT) disclosed in May 2022 that allows arbitrary code execution through weaponized Office documents via template injection and the ms-msdt URI handler, without requiring macros to be enabled. The flaw is exploitable through phishing attachments and is likely to be widely adopted by threat actors. Security teams should monitor msdt.exe as a child process of Office applications and track suspicious command line arguments and network activity.
Why it matters: Organizations using Microsoft Office face immediate risk from phishing attacks delivering weaponized documents that execute code without user interaction beyond opening the file; detection and monitoring of msdt.exe child processes is essential to identify exploitation attempts.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Vulnerability summary: Follina, CVE-2022-30190
CVE-2022-30190, known as Follina, is a vulnerability in Microsoft Support Diagnostic Tool (MSDT) disclosed in May 2022 that allows arbitrary code execution through weaponized Office documents via template injection and the ms-msdt URI handler, without requiring macros to be enabled. The flaw is exploitable through phishing attachments and is likely to be widely adopted by threat actors. Security teams should monitor msdt.exe as a child process of Office applications and track suspicious command line arguments and network activity.
Why it matters: Organizations using Microsoft Office face immediate risk from phishing attacks delivering weaponized documents that execute code without user interaction beyond opening the file; detection and monitoring of msdt.exe child processes is essential to identify exploitation attempts.
- Source published
- First seen by Cybersecurity Tracker