CVE Feed

    Dashboard / CVE / CVE-2019-0541

    CVE-2019-0541

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

    Published:Jan 8, 2019
    Last Modified:Oct 29, 2025
    EPS:Jan 8, 2019
    EPSS Score:0.84291
    CVSS Score:8.8

    CISA Notification

    Description

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    May 3, 2022
    1592 days ago
    Alert Date
    Nov 3, 2021
    1773 days ago

    Affected Products

    Vendor
    Microsoft
    Product
    Excel Viewer
    Vendor
    Microsoft
    Product
    Internet Explorer
    Vendor
    Microsoft
    Product
    Office
    Vendor
    Microsoft
    Product
    Office 365 Proplus
    Vendor
    Microsoft
    Product
    Office Word Viewer
    Vendor
    Microsoft
    Product
    Windows 10 1507
    Vendor
    Microsoft
    Product
    Windows 10 1607
    Vendor
    Microsoft
    Product
    Windows 10 1703
    Vendor
    Microsoft
    Product
    Windows 10 1709
    Vendor
    Microsoft
    Product
    Windows 10 1803
    Vendor
    Microsoft
    Product
    Windows 10 1809
    Vendor
    Microsoft
    Product
    Windows 7
    Vendor
    Microsoft
    Product
    Windows 8.1
    Vendor
    Microsoft
    Product
    Windows Rt 8.1
    Vendor
    Microsoft
    Product
    Windows Server 2008
    Vendor
    Microsoft
    Product
    Windows Server 2012
    Vendor
    Microsoft
    Product
    Windows Server 2016
    Vendor
    Microsoft
    Product
    Windows Server 2019

    Exploits

    https://www.exploit-db.com/exploits/46536/https://www.exploit-db.com/exploits/46536/https://www.exploit-db.com/exploits/46536

    Related CVEs

    CVE-2019-0669 (CVSS 6.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2019-0540 (CVSS 5.5) — A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could …
    CVE-2018-8627 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to …
    CVE-2018-8577 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly h…
    CVE-2018-8432 (CVSS 7.8) — A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in m…
    CVE-2018-8427 (CVSS 5.5) — An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in…
    CVE-2018-8429 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2018-8378 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to…
    CVE-2018-8382 (CVSS 5.5) — An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its m…
    CVE-2018-8375 (CVSS 7.8) — A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly h…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High