CVE-2025-30397 vulnerability in Microsoft Products
Published on May 13, 2025


Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
Known Exploited Vulnerability
This Microsoft Windows Scripting Engine Type Confusion Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.
The following remediation steps are recommended / required by June 3, 2025: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
Products Associated with CVE-2025-30397
You can be notified by stack.watch whenever vulnerabilities like CVE-2025-30397 are published in these products:
What versions are vulnerable to CVE-2025-30397?
-
Microsoft Windows Server 2008 Version r2 sp1 x64
-
Microsoft Windows Server 2012 Version r2
-
Microsoft Windows Server 2008 Version - sp2
-
Microsoft Windows Server 2012 Version -
-
Microsoft Windows 10 1607 Fixed in Version 10.0.14393.8066
-
Microsoft Windows 10 1809 Fixed in Version 10.0.17763.7314 x64
-
Microsoft Windows 10 1809 Fixed in Version 10.0.17763.7314 x86
-
Microsoft Windows 10 21h2 Fixed in Version 10.0.19044.5854
-
Microsoft Windows 10 22h2 Fixed in Version 10.0.19045.5854
-
Microsoft Windows 11 22h2 Fixed in Version 10.0.22621.5335
-
Microsoft Windows 11 23h2 Fixed in Version 10.0.22631.5335
-
Microsoft Windows 11 24h2 Fixed in Version 10.0.26100.4061
-
Microsoft Windows Server 2016 Fixed in Version 10.0.14393.8066
-
Microsoft Windows Server 2019 Fixed in Version 10.0.17763.7314
-
Microsoft Windows Server 2022 Fixed in Version 10.0.20348.3692
-
Microsoft Windows Server 2022 23h2 Fixed in Version 10.0.25398.1611
-
Microsoft Windows Server 2025 Fixed in Version 10.0.26100.4061
-
Microsoft Windows 10 1507 Fixed in Version 10.0.10240.21014