CVE-2025-30397 is a high-severity type confusion vulnerability in the Microsoft Windows Scripting Engine. It allows an unauthorized attacker to execute arbitrary code remotely via a specially crafted URL. The vulnerability has been exploited in the wild, increasing its risk profile. No specific affected versions or patch information is provided in the available data.