Description
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 5 Jul 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.