CVE-2025-30397 Microsoft Windows
Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Scripting Engine Type Confusion Vulnerability
- Added
- 2025-05-13
- Federal patch deadline
- 2025-06-03
- Ransomware use
- not known