CVE-2019-1195

CVE-2019-1195 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge (HTML-based) on Windows 10, Windows Server 2016, and Windows Server 2019. It allows an attacker to execute arbitrary code in the context of the current user by tricking them into visiting a specially crafted website. The vulnerability has a CVSS score of 4.2 (Medium) due to its network attack vector, high attack complexity, and user interaction requirement, potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, though it has received some community discussion and media coverage.