Follina
CVE-2022-30190 — RCE via Word document → MSDT (Microsoft Support Diagnostic Tool) ms-msdt: URL handler. Worked even with macros disabled.
Discovered 27 May 2022 by nao_sec who tweeted a sample from VirusTotal. Named after Follina, the Italian town (postal code "0438" matches CVE digits, fun fact). Active exploitation by APT groups (Chinese TA413, Russian APT28). Workaround: disable MSDT URL handler. Patched 14 June.