CVE-2019-0917

CVE-2019-0917 describes a remote code execution vulnerability within the Chakra scripting engine of Microsoft Edge, impacting Microsoft Windows 10, Windows Server 2016, and Windows Server 2019. This memory corruption flaw allows an attacker to execute arbitrary code if a user visits a specially crafted website. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-based attack with high impact on confidentiality, integrity, and availability, requiring user interaction and high attack complexity. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB. Community discussion and media coverage are minimal, with only one article mentioning it as part of Microsoft's May 2019 Patch Tuesday.