CVE-2019-1196

CVE-2019-1196 describes a remote code execution vulnerability in the Chakra scripting engine of Microsoft Edge (HTML-based), affecting Microsoft Edge, Windows 10, and Windows Server 2019. This memory corruption flaw allows an attacker to execute arbitrary code with the same privileges as the current user. With a CVSS score of 4.2 (Medium), successful exploitation requires user interaction, typically by convincing a user to visit a specially crafted malicious website. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community and media attention.