peter bassill · operator
$ cve CVE-2022-34713 JSON

CVE-2022-34713 KEV

7.8
HIGH · CVSS 3.1 · EPSS 67.8% (pctl 99)

Patch first

On CISA KEV — known exploited in the wild, due 2022-08-30.

Description

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS67.76% — more likely to be exploited than 99% of all CVEs
On CISA KEVyes — remediate by 2022-08-30
Public exploitnone known
Published2022-08-09
Last modified2026-06-17

CISA KEV

NameMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
Added2022-08-09
Due2022-08-30
Vendor / productMicrosoft / Windows
Ransomware usenone reported

Affected (16)

VendorProduct
microsoftwindows 10 1507
microsoftwindows 10 1607
microsoftwindows 10 1809
microsoftwindows 10 20h2
microsoftwindows 10 21h1
microsoftwindows 10 21h2
microsoftwindows 11 21h2
microsoftwindows 7
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows server 2016
microsoftwindows server 2019
microsoftwindows server 2022
microsoftwindows server 20h2

References

→ the Explorer  ·  watch your stack  ·  NVD