Windows MSDT zero-day vulnerability gets free unofficial patch

Topic

New Reply

0Patch does it again..these guys definitely have no flies on them…:

“A free unofficial patch is now available to block ongoing attacks against Windows systems that target a critical zero-day vulnerability known as ‘Follina.’

“The bug, now tracked as CVE-2022-30190 and described by Redmond as a Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution flaw, impacts all Windows versions still receiving security updates (Windows 7+ and Server 2008+).”

MS has some mitigations, but no patches a/o 6/1.

Details at:

https://www.bleepingcomputer.com/news/security/windows-msdt-zero-day-vulnerability-gets-free-unofficial-patch/

Win7 Pro SP1 64-bit, Dell Latitude E6330 ("The Tank"), Intel CORE i5 "Ivy Bridge", 12GB RAM, Group "0Patch", Multiple Air-Gapped backup drives in different locations. Linux Mint Newbie
--
"The more kinks you put in the plumbing, the easier it is to stop up the pipes." -Scotty

Reply | Quote

Replies

Microsoft is dropping a lot of balls:

https://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/

 

Not a good look.

 

EDIT:  One more:

 

https://www.helpnetsecurity.com/2022/06/02/microsoft-office-homograph-attacks/

Reply | Quote