CVE-2022-30190

This vulnerability is like a “help” feature (MSDT) that can be tricked into opening a door from another program (for example, a document or message). If an attacker gets you to click or open something that triggers it, they may be able to run commands on your computer as whatever user rights the tricked program has. Think of it as turning a support hotline into a backdoor—once the trap is triggered, the attacker can take actions on your device.

This matters to you if your business uses the affected Microsoft Windows versions: microsoft windows 10 1507, microsoft windows 10 1607, microsoft windows 10 1809, microsoft windows 10 20h2, microsoft windows 10 21h1, microsoft windows 10 21h2, microsoft windows 11 21h2, microsoft windows 7, microsoft windows 8.1, or microsoft windows rt 8.1. The risk is higher if your staff open email attachments or documents from the internet (for example, Microsoft Word files).

This is urgent because it is already being exploited in the wild, including in ransomware, and there is public exploit code available. With the estimated exploitation likelihood being extremely high in the next 30 days, you should treat this as an active attack threat and prioritize fixing it now rather than waiting.