3571 matches found
Patch Tuesday - May 2025
Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...
CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
CVE-2025-30397 is a memory-corruption/Use-After-Free style vulnerability in the Microsoft Scripting Engine (jscript.dll) that enables remote code execution via specially crafted web content. The CVE’s affected component is the JScript/Windows Scripting Engine, with an attack vector over the netwo...
CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability
...
CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability
...
CISA Adds Five Known Exploited Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-30400link is external Microsoft Windows DWM Core Library Use-After-Free Vulnerability CVE-2025-32701link is external Microsoft Windows Common Log File System...
Scripting Engine Memory Corruption Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2025-30397
Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
PT-2025-21001
Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description The issue is related to a type confusion vulnerability in the Microsoft Scripting Engine, which allows an unauthorized attacker to execute code over a network. This can be...
CVE-2025-30397: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
VulnCheck KEV: CVE-2025-30397
Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL...
Microsoft Scripting Engine 安全漏洞
Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL...
CVE-2024-43584
Windows Scripting Engine Security Feature Bypass Vulnerability...
CVE-2024-43584
Windows Scripting Engine Security Feature Bypass Vulnerability...
CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability
...
CVE-2024-43584
CVE-2024-43584 affects Windows Scripting Engine and is described as a Security Feature Bypass. Public sources in connected docs identify Microsoft as the vendor and Windows Scripting as the affected component, with root cause framed as a bypass of a security feature and impact described as circum...
CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability
...
PT-2024-7809
Name of the Vulnerable Software and Affected Versions Windows Scripting Engine affected versions not specified Description A security feature bypass issue exists in the Windows Scripting Engine, allowing attackers to bypass security restrictions. The vulnerability is related to the...