CVE-2019-0897

CVE-2019-0897 is a remote code execution vulnerability in the Windows Jet Database Engine, affecting multiple versions of Windows, including Windows 7, 8.1, 10, and various Windows Server editions. This high-severity vulnerability (CVSS 7.8) allows an attacker to execute arbitrary code on a vulnerable system if a user is tricked into opening a specially crafted file. While the attack complexity is low, it requires user interaction, and successful exploitation could lead to complete compromise of confidentiality, integrity, and availability. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed on the CISA KEV catalog, indicating no active exploitation. However, it has received some community discussion and media coverage, notably being addressed in Microsoft's May 2019 Patch Tuesday.