ZeroDay Findings
Sign inSign up

Findings

CVE-2019-0541

Microsoft MSHTML Remote Code Execution Vulnerability

Published Jan 8, 2019 · updated Jun 16, 2026 · microsoft internet explorer

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 8, 2019 · Catalog

    Detected

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/excel viewer2007
  • cpe microsoft/internet explorer10
  • cpe microsoft/internet explorer11
  • cpe microsoft/internet explorer9
  • cpe microsoft/office2010
  • cpe microsoft/office2013
  • cpe microsoft/office2016
  • cpe microsoft/office2019
  • cpe microsoft/office 365 proplusversion unspecified
  • vendor Microsoft MSHTMLversion unspecified

Sources

  • CISA KEVCVE-2019-0541

    Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.

    cisa.gov
  • CVE.orgCVE-2019-0541

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-0541

    30-day exploitation probability 53.2%

    first.org
  • Exploit Database46536

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2019-0541

    A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Ex

    nvd.nist.gov

References