The CVE-2022-34713 DogWalk has been exploited and is a variant of Follina (CVE-2022-30190), which FortiGuard also calls a similar MSDT bug. It is a vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT). The August 2022 Patch Tuesday finally fixed it, and Microsoft noted it was being actively exploited. CISA added it to its KEV catalog the same day. Security researcher Imre Rad published DogWalk with a PoC in January 2020, more than two years earlier, after Microsoft told him it would not fix the issue and did not consider it a vulnerability. Microsoft only reassessed his 2019 report in August 2022, under its updated Windows bug bar. Two months before the patch, j00sean called it an underrated MSDT 0day with a demo video. His all-in-one list: persistence via the startup folder, a MOTW bypass, a Defender bypass, and no warning from Chrome, Edge or Opera on download.
Years after claiming DogWalk wasn’t a vulnerability, Microsoft confirms flaw is being exploited and issues patch — Bitdefender