New vulnerability in a Microsoft tool enables attacks using malicious Microsoft Office documents

The vulnerability has been given the identifier CVE-2022-30190 and assigned a CVSS3 score of 7.8. The vulnerability can be exploited if the victim just previews a malicious document in Microsoft Explorer or opens a document that contains malicious code. Microsoft’s “Protected View” and “Application Guard” provide protection against the vulnerability.

Some malware detection tools can detect attempts to exploit the vulnerability. These include Microsoft Defender Antivirus and Microsoft Defender for Endpoint.

Exploitation of the vulnerability has already been detected, which means that great caution should be taken with documents received from unreliable sources until a patch has been installed.