CVE-2025-30397

Microsoft Windows Scripting Engine Type Confusion Vulnerability

Windows 10 1507

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

13. Mai 2025

Ausgewertete Quellen

• Microsoft
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30397
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2025-30397-type-confusion-vulnerability-in-microsoft-scripting-engine-detection-script
• Hinweis
  https://www.vicarius.io/vsociety/posts/cve-2025-30397-type-confusion-vulnerability-in-microsoft-scripting-engine-mitigation-script
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-30397
• CISA
  Microsoft Windows Scripting Engine Type Confusion Vulnerability
• NVD
  CVE-2025-30397