CVE-2019-1107

CVE-2019-1107 is a remote code execution vulnerability found in the Chakra scripting engine, specifically impacting Microsoft Edge and various Windows operating systems. This memory corruption flaw could allow an attacker to execute arbitrary code on a vulnerable system. With a CVSS score of 7.5 (HIGH), exploitation requires user interaction (e.g., visiting a malicious website) and has high impacts on confidentiality, integrity, and availability. While no public exploit code or Metasploit modules are available, the vulnerability received some community discussion and media coverage, indicating awareness. It is not currently listed on CISA's KEV catalog as being actively exploited.