HIGH

CVE-2022-34713

Microsoft Windows 10 1507 2022-08-09 CVSS v3.1

CVSS

7.8

KEV

Description

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Summary dbcve.org

CVE-2022-34713 is a remote code execution vulnerability in Microsoft's Windows Support Diagnostic Tool (MSDT). The vulnerability allows an attacker to execute arbitrary code on affected Windows systems through maliciously crafted requests, potentially leading to complete system compromise.

Mitigation

Apply Microsoft security updates for MSDT when available, or disable MSDT as an interim measure until patches can be deployed.

Patch Commit

EPSS Score

67.76%

Probability of exploitation in next 30 days

99.3th percentile

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713 Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-34713 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE