Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A flaw in Microsoft's Windows Support Diagnostic Tool allows attackers to run malicious code on your computer through specially crafted files or links. This is dangerous because it can give attackers full control of your system without your knowledge.

CVE-2022-34713 is a remote code execution vulnerability in MSDT exploitable via malicious URI schemes or specially crafted documents (e.g., Office files with embedded ms-msdt:// links). The attack requires user interaction to open the malicious file but bypasses UAC protections, allowing arbitrary code execution in the context of the calling process.