Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

What happened

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

Affected versions

Windows: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

• Review the original advisory and validate affected versions.
• Apply vendor-provided updates or mitigations when available.