# CVE-2022-30190 (Follina) Explained
In the world of cybersecurity, vulnerabilities can pose significant risks to users and organizations alike. One such vulnerability that has garnered attention is **CVE-2022-30190**, commonly known as **Follina**. This post aims to break down what Follina is, how it works, and why it’s important to be aware of it.
## What is Follina?
Follina is a vulnerability found in **Microsoft Office** applications, particularly affecting **Word** documents. It exploits a feature called the **remote template** feature, which allows a Word document to retrieve an HTML file from a remote web server. This seemingly harmless function can be manipulated by attackers to execute malicious code on a victim’s machine.
## How Does Follina Work?
When a user opens a Word document that has been crafted to exploit this vulnerability, the document can automatically connect to a remote server to download an HTML file. This HTML file can contain harmful scripts that can compromise the user’s system. The key component of this attack is the **ms-msdt** protocol, which is used to execute the malicious code without the user’s knowledge.
### Why is Follina Dangerous?
The danger of Follina lies in its ability to bypass traditional security measures. Many users may not be aware of the risks associated with opening documents from unknown sources, making them easy targets for attackers. Additionally, since this vulnerability leverages built-in features of Microsoft Word, it can be particularly challenging for security software to detect and block.
## Protecting Yourself from Follina
To safeguard against the Follina vulnerability, consider the following tips:
– **Be Cautious with Email Attachments**: Always be wary of opening documents from unknown senders.
– **Keep Software Updated**: Ensure that your Microsoft Office applications are up to date with the latest security patches.
– **Use Security Software**: Employ reliable antivirus and anti-malware solutions to help detect and block potential threats.
## Conclusion
Understanding vulnerabilities like Follina is crucial in today’s digital landscape. By staying informed and taking proactive measures, you can help protect yourself and your organization from potential attacks.
For more detailed information on Follina and its implications, feel free to check out the source of this information: [Hack The Box – CVE-2022-30190 (Follina) Explained](https://www.hackthebox.com/blog/cve-2022-30190-follina-explained).
stop
