CVE-2022-34713
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
67.8%
p99
KEV
SIM
9 de ago. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
67.8%EPSS · 30 dias67.8%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Adicionado ao KEV
9 de ago. de 2022
Corrigir até
30 de ago. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.
Ação necessária
Apply updates per vendor instructions.
Notas
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713; https://nvd.nist.gov/vuln/detail/CVE-2022-34713
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7dCVE-2026-858807.8 ALT33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42dCVE-2026-819637.8 ALT33.7%
KEV—60Microsoft Windows Link Following Vulnerability58dCVE-2026-322024.3 MÉD99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10dCVE-2026-208055.5 MÉD94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98dCVE-2025-622217.8 ALT84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d