CVE-2019-1024

CVE-2019-1024 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge (HTML-based), Windows 10, and Windows Server 2019. This memory corruption flaw allows an attacker to execute arbitrary code with the same privileges as the current user by convincing them to visit a specially crafted website. The vulnerability has a CVSS score of 4.2 (Medium) due to its network attack vector, high attack complexity, and user interaction requirement, potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed on the CISA KEV catalog.