Microsoft update

KB5058380

IE Cumulative

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.003
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.003
Windows Server 2008 for 32-bit Systems Service Pack 2 1.003
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.003
Windows Server 2008 for x64-based Systems Service Pack 2 1.003
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.003
Windows Server 2012 1.003
Windows Server 2012 (Server Core installation) 1.003
Windows Server 2012 R2 1.003
Windows Server 2012 R2 (Server Core installation) 1.003

Fixes 1 record

TI-2025-21699 CVE-2025-30397 · GHSA-r7hj-5f27-q8xw

Scripting Engine Memory Corruption Vulnerability

CRITICAL 92KEV

Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.27263 Published 2025-05-13 Fixed in 10.0.10240.21014, 10.0.14393.8066 +12 CWE-843