Microsoft has patched a Windows vulnerability that hackers are actively exploiting. If your computer runs Windows 7 or newer, install the update as soon as possible (via Bleeping Computer).
Update (October 2026): This is our news from June 2022. Windows cumulative updates include all earlier fixes, so every later update also protects you from Follina. Today, simply install the latest updates from Windows Update. Note that Windows 10 support ended on October 14, 2025. If you still use Windows 10, read how to extend Windows 10 security updates.
In this article
What is the Follina vulnerability?
Researchers call the security flaw Follina (CVE-2022-30190). It lets attackers take over a computer through programs like Microsoft Word. Security researchers have been aware of the threat since late May 2022, but Microsoft reportedly dismissed their first findings.
How hackers used it
In an attack documented by the security company Proofpoint, hackers linked to the Chinese government sent malicious Word documents to people in Tibet. When a victim opened the document, the Follina exploit took control of the Microsoft Support Diagnostic Tool (MSDT). Through MSDT, attackers can run commands that install programs, create new user accounts, and view, change or delete data on the computer.
The exploit has also been used in phishing campaigns against government agencies in the United States and Europe.
The fix: the June 2022 Windows updates
Microsoft’s original warning offered workarounds to protect against the threat. The June 14, 2022 updates make those workarounds unnecessary:
“Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability,” Microsoft says. “Customers whose systems are configured to receive automatic updates do not need to take any further action.”
How to install the update
The easiest way is Windows Update: open Settings > Windows Update (on Windows 10: Settings > Update & Security > Windows Update) and click Check for updates.
If you need to install it offline, download it from the official Microsoft Update Catalog:
Microsoft Update Catalog links: KB5014697 (Windows 11) and KB5014699 (Windows 10). Choose the file for your Windows version and system type (x64, x86 or ARM64), then double-click the downloaded .msu file to install it.
Source: The Verge
