Threat Intel Flash Briefing May 31st 2022 - Follina - CVE-2022-30190

The sky IS NOT falling with this one. Is it important? Yes. Does it highlight an area that's under-researched and likely contains additional attack vectors and techniques? Absolutely. Resources https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190 https://doublepulsar.com/follina-a-microsoft-office-code-execution-vulnerability-1a47fce5629e https://www.huntress.com/blog/microsoft-office-remote-code-execution-follina-msdt-bug https://github.com/NVISOsecurity/nviso-cti/blob/mast...