Vulnerability summary: Follina, CVE-2022-30190

On May 27, 2022 researchers disclosed "Follina" (CVE-2022-30190), an MSDT remote code execution vulnerability abused through ms-msdt URIs in Microsoft Office template injection; exploitation can occur via weaponized Office attachments and does not require macros. The report urges monitoring msdt.exe as a child of Office processes, deploying Elastic detection signatures, and references Microsoft's guidance and multiple third-party analyses.