Back to the CVE list
CVE-2022-30190 CISA KEV · Actively exploitedLinked to ransomware

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CVSS score

7.8

EPSS probability

%99.2

Risk score

15.5

Published

4 y ago

OverviewPublic Exploits (22)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
JMousqueton/PoC-CVE-2022-30190
GitHub

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina (★134)

Public PoCSource updated: 20.08.2022 07:50:03
G
onecloudemoji/CVE-2022-30190
GitHub

CVE-2022-30190 Follina POC (★8)

Public PoCSource updated: 31.05.2022 21:02:17
G
DerZiad/CVE-2022-30190
GitHub

Proof-of-concept exploit for CVE-2022-30190 (Follina) (★6)

Public PoCSource updated: 13.09.2025 23:49:00
G
dwisiswant0/gollina
GitHub

Follina MS-MSDT 0-day MS Office RCE (CVE-2022-30190) PoC in Go (★3)

Public PoCSource updated: 01.06.2022 19:48:01
G
komomon/CVE-2022-30190-follina-Office-MSDT-Fixed
GitHub

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。 (★3)

Public PoCSource updated: 03.06.2022 01:24:03
G
EkamSinghWalia/Follina-MSDT-Vulnerability-CVE-2022-30190-
GitHub

Detection and Remediation of the Follina MSDT Vulnerability (CVE-2022-30190) (★3)

Public PoCSource updated: 21.07.2022 18:49:23
G
flux10n/CVE-2022-30190
GitHub

CVE-2022-30190 (★2)

Public PoCSource updated: 28.09.2022 21:10:51
G
rouben/CVE-2022-30190-NSIS
GitHub

An NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft (★1)

Public PoCSource updated: 02.06.2022 07:37:03
G
ErrorNoInternet/FollinaScanner
GitHub

A tool written in Go that scans files & directories for the Follina exploit (CVE-2022-30190) (★1)

Public PoCSource updated: 02.06.2022 16:24:09
G
WesyHub/CVE-2022-30190---Follina---Poc-Exploit
GitHub

Simple Follina poc exploit (★1)

Public PoCSource updated: 03.06.2022 01:56:58
G
joshuavanderpoll/CVE-2022-30190
GitHub

Microsoft Support Diagnostic Tool (CVE-2022-30190) (★1)

Public PoCSource updated: 07.06.2022 19:12:50
G
Lucaskrell/go_follina
GitHub

Follina (CVE-2022-30190) proof-of-concept (★1)

Public PoCSource updated: 25.01.2023 22:54:32
G
ToxicEnvelope/FOLLINA-CVE-2022-30190
GitHub

Implementation of FOLLINA-CVE-2022-30190 (★1)

Public PoCSource updated: 15.03.2023 12:40:44
N
http://packetstormsecurity.com/files/167438/Microsoft-Office-Word-MSDTJS-Code-Execution.html
NVD reference

http://packetstormsecurity.com/files/167438/Microsoft-Office-Word-MSDTJS-Code-Execution.html

Exploit reference
G
bcarrulo/Lab-CVE-2022-30190
GitHub

bcarrulo/Lab-CVE-2022-30190

Public PoC
G
ImVihanga03/Static-Malware-Analysis-Follina-CVE-2022-30190
GitHub

Static Malware Analysis of Follina (CVE-2022-30190) from Blue Team Labs Online

Public PoC
G
kaleth4/CVE-2022-30190
GitHub

kaleth4/CVE-2022-30190

Public PoC
G
nimesh895/Malware-Analysis-Follina-CVE-2022-30190
GitHub

nimesh895/Malware-Analysis-Follina-CVE-2022-30190

Public PoC
G
shndnth/CVE-2022-30190
GitHub

Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.

Public PoC
G
u1tr0nex/CVE-2022-30190-Follina-Lab
GitHub

Full exploit chain lab and Suricata IDS detection for CVE-2022-30190 (Follina) - MSDT RCE

Public PoC
G
winstxnhdw/CVE-2022-30190
GitHub

A proof of concept for CVE-2022-30190 (Follina).

Public PoC
G
zavikhttak/follina-msdt-threat-investigation
GitHub

🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal, OSINT, MITRE ATT&CK T1059, and detection engineering using Windows Event ID 4688.

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-30190"