CVE-2019-1002

CVE-2019-1002 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge (HTML-based) on Windows 10 and Windows Server 2016. It arises from improper memory handling, allowing an attacker to execute arbitrary code with the same privileges as the current user. The vulnerability has a CVSS score of 4.2 (Medium), indicating a network-based attack requiring user interaction and high attack complexity, with potential for limited confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.