Netskope Threat Labs

ET HUNTING Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 0-click RTF (CVE-2022-30190)

IPS-CFWIPS-SWG

1 SID: 2059679

First seen
February 2025
Last seen
October 2026

Detects attempts to exploit a remote code execution vulnerability in Microsoft Windows. Associated with CVE-2022-30190.