Vulnerability detail

Tenable Blog · May 27, 2026

Tenable Research has developed a graph-based model linking 600+ threat groups to real-world customer exposures. It reveals which vulnerabilities sit at the intersection of severity, active exploitation, and organizational risk.Key takeawaysThe "patch everything" strategy is dead: Vulnerability prioritization based on exploitation risk offers a path forward. A directed graph model linking 600+ threat actors to vulnerabilities in 7,800 customer environments reveals that 68% of organizations carry at least one CVE previously exploited by a named adversary, and 321 tracked threat groups can reach at least one customer environment through an active vulnerability. Prevalence of "Elite Arsenal" CVEs requires immediate attention: The 242 "Elite Arsenal" CVEs — those meeting all three criteria of critical VPR (≥ 9), CISA KEV listing, and documented threat group exploitation — are nearly universally present across the studied customer base, with 241 of 242 actively detected. More than half are five or more years old, and 78% of the persistently exploited core are simultaneously weaponized by nation-state APTs, commodity malware operators, and ransomware gangs. Non-CVE exposures are universally dangerous: Non-CVE exposures, including misconfigurations, weak credentials, and end-of-life software, are present in virtually 100% of studied organizations, with 60% carrying at least one that maps to a tracked threat actor's preferred techniques. Preliminary modeling suggests these exposures may confer more breach risk than CVE-linked findings, yet no industry-standard scoring infrastructure exists to prioritize them.While the first two posts in this blog series documented the accelerating vulnerability flood and the widening remediation gap, today we answer the outstanding question: Where do these forces actually collide inside customer environments? Using a directed graph model that maps more than 600 tracked threat groups to vulnerabilities observed across 7,800 organizations,...

metasploit · Created Unknown

Metasploit module for CVE-2022-30190

github · Created 2023-07-17 15:24:54 UTC · 1 stars

github · Created 2023-05-14 13:38:43 UTC · 7 stars

Follina (CVE-2022-30190) is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution (RCE) attacks.

github · Created 2022-12-12 02:04:57 UTC · 0 stars

Educational Follina PoC Tool

github · Created 2022-09-15 16:12:57 UTC · 2 stars

A proof of concept for CVE-2022-30190 (Follina).

github · Created 2022-07-21 06:49:44 UTC · 3 stars

Detection and Remediation of the Follina MSDT Vulnerability (CVE-2022-30190)

github · Created 2022-06-29 08:48:12 UTC · 8 stars

This is exploit of CVE-2022-30190 on PowerPoint.

github · Created 2022-06-13 04:20:02 UTC · 2 stars

An Unofficial Patch Follina CVE-2022-30190 (patch) by micrisoft Guidelines.

github · Created 2022-06-05 13:54:04 UTC · 5 stars

github · Created 2022-06-04 19:48:37 UTC · 6 stars

github · Created 2022-06-03 08:00:01 UTC · 3 stars

Follina POC by John Hammond

github · Created 2022-06-03 05:52:36 UTC · 0 stars

This is to patch CVE-2022-30190. Use at your own risk.

github · Created 2022-06-02 16:14:13 UTC · 2 stars

A very simple MSDT "Follina" exploit **patched**

github · Created 2022-06-02 13:43:20 UTC · 2 stars

The CVE-2022-30190-follina Workarounds Patch

github · Created 2022-06-02 13:01:46 UTC · 3 stars

github · Created 2022-06-02 12:58:24 UTC · 2 stars

github · Created 2022-06-02 12:33:18 UTC · 396 stars

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

github · Created 2022-06-02 07:01:19 UTC · 1 stars

github · Created 2022-06-01 23:27:14 UTC · 7 stars

MS-MSDT Follina CVE-2022-30190 PoC document generator

github · Created 2022-06-01 18:58:07 UTC · 3 stars

An NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft

github · Created 2022-06-01 11:37:08 UTC · 8 stars

Just another PoC for the new MSDT-Exploit

github · Created 2022-05-31 18:00:42 UTC · 4 stars

Microsoft Sentinel analytic rule and hunting queries in ASIM for activity of MSDT and CVE-2022-30190.

github · Created 2022-05-31 14:10:11 UTC · 38 stars

This Repository Talks about the Follina MSDT from Defender Perspective

github · Created 2022-05-31 12:15:18 UTC · 59 stars

Microsoft Office Word Rce 复现(CVE-2022-30190)

github · Created 2022-05-31 06:45:25 UTC · 104 stars

CVE-2022-30190 Follina POC

github · Created 2022-05-30 18:17:38 UTC · 157 stars

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina