CVE-2019-1156

CVE-2019-1156 is a remote code execution vulnerability in the Windows Jet Database Engine that affects multiple versions of Microsoft Windows and Windows Server. An attacker could exploit this by tricking a user into opening a specially crafted file, leading to arbitrary code execution on the victim's system. With a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) but has low attack complexity (AC:L) and can result in high impact to confidentiality, integrity, and availability. While no public exploit code is available (Metasploit, Nuclei, ExploitDB: None) and it is not listed in CISA's KEV catalog, there has been some community discussion and media coverage surrounding its disclosure.