References https://www.microsoft.com/en-us/msrc/blog/2022/05/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-30190 https://learn.microsoft.com/zh-tw/answers/questions/4308245/microsoft-support-diagnostic-tool-(msdt)-(cve-2022 https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/1214/ https://ti.qianxin.com/blog/articles/cve-2022-30190:%20microsoft-windows-wupport-diagnostic-tool%20(msdt)-remote-code-execution-vulnerability-exploit-analysis/ https://en.wikipedia.org/wiki/Microsoft_Support_Diagnostic_Tool https://nvd.nist.gov/vuln/detail/CVE-2022-34713 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-30190 https://blogs.juniper.net/en-us/threat-research/cve-2022-30190-microsoft-windows-support-diagnostic-tool-msdt-remote-code-execution-vulnerability https://www.cve.org/CVERecord?id=CVE-2022-30190
Related VulnerabilitiesPoCCVE-2026-58644: Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCEMicrosoft SharePoint /_layouts/15/ToolPane.aspx 代码执行漏洞(CVE-2025-53770)Microsoft SharePoint Server /_trust/default.aspx 代码执行漏洞(CVE-2026-50522)Microsoft SharePoint Server JWT 权限绕过漏洞(CVE-2026-55040)Windows截图工具NTLM信息泄露漏洞(CVE-2026-33829)Gradio /static//windows/win.ini 文件读取漏洞 (CVE-2026-28414)Windows Shell Link 敏感信息泄露与欺骗漏洞(CVE-2026-25185)BeyondTrust Remote Support 代码执行漏洞(CVE-2026-1731)PoCCVE-2021-28480: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCCVE-2021-28481: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)PoCambassador-api-diagnostics-exposure: Ambassador API Gateway Diagnostics - ExposurePoCglimpse-data-exposure: Glimpse Diagnostics - Sensitive Data ExposurePoCwp-svg-support-fpd: WordPress SVG Support - Full Path Disclosure