Follina.doc May 2026

(CVE-2022-30190) is a critical remote code execution (RCE) vulnerability that allows attackers to take control of a Windows system through a malicious Microsoft Office document. It was discovered in May 2022 and gained notoriety because it could execute malicious commands even if macros were disabled. Key Technical Details