CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Scripting Engine Type Confusion Remote Code Execution Vulnerability (CVE-2025-30397) Analysis and Mitigation Guide
[Affected Scope] Windows operating systems and applications utilizing the Microsoft Scripting Engine
[Impact] Unauthorized remote attackers can execute arbitrary code and compromise system integrity via crafted web content or documents
[Mitigation] Immediately apply the official Microsoft security updates and restrict untrusted script execution policies
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (CVE-2024-38178) Technical Advisory
[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled
[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages
[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable