Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2025-30397

🗓️ 13 May 2025 16:59:10Reported by microsoftType 
cve
 cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 347 Views

Vulnerability in Scripting Engine leads to memory corruption risk in software applications.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Type Confusion in Microsoft
23 Jul 202515:34
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2025-2783
26 May 202512:51
–githubexploit
githubexploit
GithubExploit		Exploit for Type Confusion in Microsoft
31 May 202512:20
–githubexploit
attackerkb
attackerkb		CVE-2025-30397
13 May 202500:00
–attackerkb
avleonov
Information Security Automation		May Microsoft Patch Tuesday
14 May 202500:58
–avleonov
bdu_fstec
BDU FSTEC		Scripting Engine Code Execution
14 May 202500:00
–bdu_fstec
circl
Circl		CVE-2025-30397
13 May 202516:27
–circl
cisa_kev
CISA KEV Catalog		Microsoft Windows Scripting Engine Type Confusion Vulnerability
13 May 202500:00
–cisa_kev
cisa
CISA		 CISA Adds Five Known Exploited Vulnerabilities to Catalog
13 May 202512:00
–cisa
cnnvd
CNNVD		Microsoft Scripting Engine security vulnerabilities
13 May 202500:00
–cnnvd
Rows per page
NVD
Vulners
CNA
Node
OR
microsoftwindows_10_1507Range<10.0.10240.21014
microsoftwindows_10_1607Range<10.0.14393.8066
microsoftwindows_10_1809Range<10.0.17763.7314x64
microsoftwindows_10_1809Range<10.0.17763.7314x86
microsoftwindows_10_21h2Range<10.0.19044.5854
microsoftwindows_10_22h2Range<10.0.19045.5854
microsoftwindows_11_22h2Range<10.0.22621.5335
microsoftwindows_11_23h2Range<10.0.22631.5335
microsoftwindows_11_24h2Range<10.0.26100.3981
microsoftwindows_server_2008Match-sp2
microsoftwindows_server_2008Matchr2sp1x64
microsoftwindows_server_2012Match-
microsoftwindows_server_2012Matchr2
microsoftwindows_server_2016Range<10.0.14393.8066
microsoftwindows_server_2019Range<10.0.17763.7314
microsoftwindows_server_2022Range<10.0.20348.3692
microsoftwindows_server_2022_23h2Range<10.0.25398.1611
microsoftwindows_server_2025Range<10.0.26100.3981
[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1507",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.10240.0",
        "lessThan": "10.0.10240.21014",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8066",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.7314",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 21H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19044.0",
        "lessThan": "10.0.19044.5854",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 22H2",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.19045.0",
        "lessThan": "10.0.19045.5854",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22621.0",
        "lessThan": "10.0.22621.5335",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 version 22H3",
    "platforms": [
      "ARM64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.5335",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 23H2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.22631.0",
        "lessThan": "10.0.22631.5335",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 11 Version 24H2",
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4061",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.27729",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.1.7601.0",
        "lessThan": "6.1.7601.27729",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.23279",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.0.6003.0",
        "lessThan": "6.0.6003.23279",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25475",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.2.9200.0",
        "lessThan": "6.2.9200.25475",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.22577",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "6.3.9600.0",
        "lessThan": "6.3.9600.22577",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8066",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.14393.0",
        "lessThan": "10.0.14393.8066",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.7314",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.17763.0",
        "lessThan": "10.0.17763.7314",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.20348.0",
        "lessThan": "10.0.20348.3692",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2022, 23H2 Edition (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.25398.0",
        "lessThan": "10.0.25398.1611",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4061",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2025 (Server Core installation)",
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "10.0.26100.0",
        "lessThan": "10.0.26100.4061",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

crstux

🔥Top10TrendingCVEs(02/06/2025)

digicat

RemoteCodeExecutionviaUse-After-FreeinJScript.dll(CVE-2025-30397)

OddUnderstanding2309

DoesCSdetectexploitationofCVE-2025-30397ifunpatched?

MauriceTorres

🔥Today’sPatchTuesdayOverview:70Vulnerabilities,5Zero-Days,5Critical&andtwowithPoCs

syedaquib77

Vulnerability Update: Microsoft Scripting Engine Memory Corruption RCE Vulnerability CVE: CVE-2025-30397 Timeline: 2025-05-13 Attribution: exploitMaturity: Actively Exploited affectedVersions: No changes detected. fixedVersions: Fixed in the May 2025 Patch Tuesday updates. Summary: The Microsoft Scripting Engine Memory Corruption vulnerability (CVE-2025-30397) remains a high-severity remote code execution flaw that requires user interaction via a specially crafted URL. It is actively exploited in the wild and was fixed in the May 2025 Patch Tuesday updates. Key attributes such as CVSS score, severity, and exploit maturity remain unchanged. This update adds new depth by expanding on the exploit mechanism involving a hardcoded machineKey and includes a significant new reference URL for the patch event. Immediate patching continues to be strongly recommended. Description: No changes detected. It remains a memory corruption vulnerability in the Microsoft Scripting Engine allowing remote code execution via a specially crafted URL with user interaction required. The new report confirms exploitation leverage through a hardcoded machineKey, providing deeper insight into the attack vector. Impact Scope: Recommended Actions: - Immediate application of the May 2025 Patch Tuesday updates Related Resources: - https://t.co/okSXbnQFfd Tags: #Microsoft #ScriptingEngine #MemoryCorruption #RCE #RemoteCodeExecution #ZeroDay #ActivelyExploited #PatchTuesday #CVE202530397 #UserInteraction #Cybersecurity

vicariusltd

Villain of the Week A high-severity vulnerability, CVE-2025-30397, has been identified in Microsoft's Scripting Engine. This flaw allows attackers to execute arbitrary code over a network by exploiting a type confusion vulnerability, particularly when Microsoft Edge operates in Internet Explorer Mode.  Why it matters: Exploiting this vulnerability could result in: - Remote code execution through malicious links or emails. - Unauthorized access to sensitive data and potential system compromise.  Recommended actions: - Apply Patches: Microsoft has released security updates addressing this vulnerability. - Disable IE Mode: If not required, disable Internet Explorer Mode in Microsoft Edge to reduce exposure. We got your back! Use these scripts from the Vicarius research team:  Detection script: https://t.co/DCUHVGSwPt  Remediation script: https://t.co/hgajvcu72j Let us know if you need assistance securing your systems or understanding these steps further

dailycve

#Microsoft Scripting Engine, Type Confusion Vulnerability, #CVE-2025-30397 (Critical)

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:08Current
8.6High risk
Vulners AI Score8.6
CVSS 3.17.5
EPSS0.27263
SSVC
CWE-843In Wild
scripting engine vulnerabilitymemory corruption risksoftware applications issue
347