Vulnerability Intelligence

🛡 CVE-2022-30190

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2022-07-05. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling applic

🏹 Attributed exploitation

Malware / ransomware (KEV): Follina — Qakbot, AsyncRAT, nation-state

Threat actors (KEV): multiple

🔗 External references & OSINT

🔄 Internal pivots & actions

🗃 Data Management

🧩 Advanced Capabilities