Microsoft Windows Scripting Engine Type Confusion Vulnerability
Microsoft · Windows
Date added (CISA)
2025-05-13
Remediation due
2025-06-03
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.