CVE-2025-30397 1

CVE-2025-30397: Microsoft Windows Scripting Engine Type Confusion Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 13, 2025

Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.

Vulnerabilities & Patching