Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1809

  • 10.0.17763.0 to < 10.0.17763.3046affected

Microsoft Windows 10 Version 1809

  • 10.0.0 to < 10.0.17763.3046affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.3046affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.3046affected

Microsoft Windows 10 Version 21H1

  • 10.0.0 to < 10.0.19043.1766affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.770affected

Microsoft Windows 10 Version 20H2

  • 10.0.0 to < 10.0.19042.1766affected

Microsoft Windows Server version 20H2

  • 10.0.0 to < 10.0.19042.1766affected

Microsoft Windows 11 version 21H2

  • 10.0.0 to < 10.0.22000.739affected

Microsoft Windows 10 Version 21H2

  • 10.0.19043.0 to < 10.0.19044.1766affected

Microsoft Windows 10 Version 1507

  • 10.0.10240.0 to < 10.0.10240.19325affected

Microsoft Windows 10 Version 1607

  • 10.0.14393.0 to < 10.0.14393.5192affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.5192affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.5192affected

Microsoft Windows 7

  • 6.1.0 to < 6.1.7601.25984affected

Microsoft Windows 7 Service Pack 1

  • 6.1.0 to < 6.1.7601.25984affected

Microsoft Windows 8.1

  • 6.3.0 to < 6.3.9600.20402affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.25984affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.25984affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.23736affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.23736affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.20402affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.20402affected

References