Threat Advisory: Zero-day vulnerability in Microsoft diagnostic tool ... A recently discovered zero-day vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT) made headlines over the past few days. CVE-2022-30190, also known under the name "Follina," exists when MSDT is called using the URL protocol from an application, such as Microsoft Office, Microsoft Word or via an RTF file.An attacker could exploit this vulnerability to gain the ability to run ...