Actively exploited in the wild
Microsoft Windows Scripting Engine Memory Corruption Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-08-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-38178
HighCVSS 7.5KEVSummary
A vulnerability in the Scripting Engine involves memory corruption. The NVD description does not provide technical details or attack vectors.
Risk Assessment
Successful exploitation could lead to arbitrary code execution or application crash, potentially resulting in system compromise.
Recommendation
Immediately apply the security updates provided by Microsoft for the Scripting Engine.
Other vulnerabilities in Scripting Engine
See all- CVE-2021-34480Medium
A memory corruption vulnerability in the Scripting Engine in Microsoft systems. Technical details are not available in the description.
- CVE-2021-34448MediumActively exploited
Memory corruption vulnerability in the scripting engine. It could allow remote code execution in the context of the logged-in user.
Original NVD description (English source)
Scripting Engine Memory Corruption Vulnerability