CVE-2022-30168
CVSS 2.0 Score 6.8 of 10 (medium)
Details
Published Jun 15, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-30168 is a remote code execution vulnerability affecting Microsoft Photos App. An attacker could exploit this flaw by tricking the victim into opening a specially crafted image file. Successful exploitation allows the adversary to execute arbitrary code on the targeted system, potentially leading to serious security consequences, including data theft or unauthorized system access. Microsoft strongly recommends users update their Microsoft Photos App to the latest version (2107.20259.20202.0) to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.