Windows MSDT: remote code execution (CVE-2022-30190)

high severity · exploited in the wild · published 2022-05-30

A crafted file, page or request can make Windows run attacker code on the PC. Attackers already use this flaw in the wild.

Fixed in: 10.0.22000.739

CVE: CVE-2022-30190

Source: Microsoft (MSRC)

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 1484 and your operating system.