CVE-2019-0541
Published 2019-01-08 · Updated 2026-06-17 · Source secure@microsoft.com
Summary
CVE-2019-0541 is a high-severity (CVSS 8.8) vulnerability in Microsoft MSHTML. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA does not currently list it as used in ransomware campaigns. Microsoft has 390 vulnerabilities in the KEV catalog, 117 of them linked to ransomware.
All 390 known-exploited Microsoft vulnerabilities →Description
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Microsoft — MSHTML
Name: Microsoft MSHTML Remote Code Execution Vulnerability
Date added: 2021-11-03 · Due: 2022-05-03
Required action: Apply updates per vendor instructions.
References
- http://www.securityfocus.com/bid/106402
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541
- https://www.exploit-db.com/exploits/46536/
- http://www.securityfocus.com/bid/106402
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541
- https://www.exploit-db.com/exploits/46536/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0541