CVE-2025-30397 is a zero-day vulnerability in the Microsoft Scripting Engine, a key component used by Internet Explorer and Internet Explorer mode in Microsoft Edge. It was actively exploited in the wild and patched by Microsoft in April 2025.
This vulnerability was used in targeted attacks, typically by tricking users into visiting a malicious website. Successful exploitation could allow an attacker to gain the same user rights as the current user.
If the current user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take control of the affected system.
Microsoft released security updates for this vulnerability as part of the April 2025 Patch Tuesday. Users and administrators are strongly advised to apply the update immediately.
For systems that cannot be patched, Microsoft recommends disabling Internet Explorer and using modern browsers with enhanced security features.