CVE-2019-1197

CVE-2019-1197 is a remote code execution vulnerability in the Chakra scripting engine affecting Microsoft Edge (HTML-based) on Windows 10, Server 2016, and Server 2019. An attacker could exploit this by convincing a user to visit a specially crafted website, leading to arbitrary code execution with the same privileges as the current user. While the CVSS score is 4.2 (Medium) with high attack complexity, successful exploitation could allow an attacker to install programs, modify data, or create new accounts. There is no evidence of active exploitation, public exploit code, or KEV listing, and community discussion and media coverage are minimal.