Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
CVE-2022-21980+3 related CVEs | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 group max | 2% | ||
| CVE-2022-34713 | Remote Code Execution in Microsoft Windows Support Diagnostic Tool (MSDT) (DogWalk) | 7.8 | 68% | KEV | KEV |
| CVE-2022-35804 | SMB Client and Server Remote Code Execution Vulnerability | 8.8 | 3% |
From the original article
3 min read at helpnetsecurity.com
The August 2022 Patch Tuesday has arrived, with fixes for an unexpectedly high number of vulnerabilities in various Microsoft products, including two zero-days: one actively exploited (CVE-2022-34713) and one not yet (CVE-2022-30134). CVE-2022-34713 is a vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT) that allows for remote code execution.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.