CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft WindowsOperating systems

CVSS

7.8High

ExploitationExploited in the wildAdded to KEV 9 Aug 2022CISA KEV

Exploit odds (EPSS)67.8%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed in10.0.17763.3287Also 10.0.19043.1889, 10.0.20348.887 and 8 moreCVE List

Federal deadline30 Aug 2022Remediation due date for US federal agenciesCISA KEV

CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

10.0.17763.3287Windows 10 Version 1809CVE List
10.0.17763.3287Windows Server 2019CVE List
10.0.17763.3287Windows Server 2019 (Server Core installation)CVE List
10.0.19043.1889Windows 10 Version 21H1CVE List
10.0.20348.887Windows Server 2022CVE List
10.0.19042.1889Windows 10 Version 20H2CVE List

Show all 22 fixed versions

10.0.19042.1889Windows Server version 20H2CVE List
10.0.22000.856Windows 11 version 21H2CVE List
10.0.19044.1889Windows 10 Version 21H2CVE List
10.0.10240.19387Windows 10 Version 1507CVE List
10.0.14393.5291Windows 10 Version 1607CVE List
10.0.14393.5291Windows Server 2016CVE List
10.0.14393.5291Windows Server 2016 (Server Core installation)CVE List
6.1.7601.26065Windows 7CVE List
6.1.7601.26065Windows 7 Service Pack 1CVE List
6.3.9600.20520Windows 8.1CVE List
6.1.7601.26065Windows Server 2008 R2 Service Pack 1CVE List
6.1.7601.26065Windows Server 2008 R2 Service Pack 1 (Server Core installation)CVE List
6.2.9200.23817Windows Server 2012CVE List
6.2.9200.23817Windows Server 2012 (Server Core installation)CVE List
6.3.9600.20520Windows Server 2012 R2CVE List
6.3.9600.20520Windows Server 2012 R2 (Server Core installation)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

9 Aug 2022Added to CISA KEVCISA KEV
9 Aug 2022, 19:55 UTCPublishedCVE List

Description

A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.

Text from CVE List

Affected versions 23

Windows 10 Version 1809affected: 10.0.17763.0 before 10.0.17763.3287CVE List
Windows 10 Version 1809affected: 10.0.0 before 10.0.17763.3287CVE List
Windows Server 2019affected: 10.0.17763.0 before 10.0.17763.3287CVE List
Windows Server 2019 (Server Core installation)affected: 10.0.17763.0 before 10.0.17763.3287CVE List
Windows 10 Version 21H1affected: 10.0.0 before 10.0.19043.1889CVE List
Windows Server 2022affected: 10.0.20348.0 before 10.0.20348.887CVE List
Windows 10 Version 20H2affected: 10.0.0 before 10.0.19042.1889CVE List
Windows Server version 20H2affected: 10.0.0 before 10.0.19042.1889CVE List
Windows 11 version 21H2affected: 10.0.0 before 10.0.22000.856CVE List
Windows 10 Version 21H2affected: 10.0.19043.0 before 10.0.19044.1889CVE List
Windows 10 Version 1507affected: 10.0.10240.0 before 10.0.10240.19387CVE List
Windows 10 Version 1607affected: 10.0.14393.0 before 10.0.14393.5291CVE List
Windows Server 2016affected: 10.0.14393.0 before 10.0.14393.5291CVE List
Windows Server 2016 (Server Core installation)affected: 10.0.14393.0 before 10.0.14393.5291CVE List
Windows 7affected: 6.1.0 before 6.1.7601.26065CVE List
Windows 7 Service Pack 1affected: 6.1.0 before 6.1.7601.26065CVE List
Windows 8.1affected: 6.3.0 before 6.3.9600.20520CVE List
Windows Server 2008 R2 Service Pack 1affected: 6.1.7601.0 before 6.1.7601.26065CVE List
Windows Server 2008 R2 Service Pack 1 (Server Core installation)affected: 6.1.7601.0 before 6.1.7601.26065CVE List
Windows Server 2012affected: 6.2.9200.0 before 6.2.9200.23817CVE List
Windows Server 2012 (Server Core installation)affected: 6.2.9200.0 before 6.2.9200.23817CVE List
Windows Server 2012 R2affected: 6.3.9600.0 before 6.3.9600.20520CVE List
Windows Server 2012 R2 (Server Core installation)affected: 6.3.9600.0 before 6.3.9600.20520CVE List