CVE-2019-1113

CVE-2019-1113 is a remote code execution vulnerability in .NET software, affecting various Microsoft products including .NET Framework, Visual Studio, and multiple Windows operating systems. This high-severity flaw (CVSS 8.8) allows an attacker to execute arbitrary code in the context of the current user by exploiting the software's failure to validate file source markup, requiring user interaction to trigger. While not listed in CISA's KEV catalog, its FAUCET Risk Score of 96/100 and EPSS score indicate significant potential impact. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and community discussion and media coverage are limited, suggesting it is not currently under widespread active exploitation.