{"id":"CVE-2019-0541","aliases":["EUVD-2019-1313","GHSA-f832-7fhg-m78h"],"status":"published","title":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly...","description":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.53202,"percentile":0.98988,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-77"],"published":"2019-01-08T21:00:00Z","modified":"2026-06-17T02:08:19Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"exploitdb","id":"EDB-46536","title":"Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution","type":"local","platform":"windows","date":"2019-03-13","url":"https://www.exploit-db.com/exploits/46536"}],"products":[{"vendor":"microsoft","product":"excel_viewer"},{"vendor":"microsoft","product":"internet explorer 10"},{"vendor":"microsoft","product":"internet explorer 11"},{"vendor":"microsoft","product":"internet explorer 9"},{"vendor":"microsoft","product":"internet_explorer"},{"vendor":"microsoft","product":"microsoft excel viewer"},{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"microsoft office word viewer"},{"vendor":"microsoft","product":"mshtml"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_365_proplus"},{"vendor":"microsoft","product":"office_word_viewer"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46536/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/106402","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0541","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0541"},{"url":"https://www.exploit-db.com/exploits/46536"},{"url":"https://github.com/advisories/GHSA-f832-7fhg-m78h"}],"sources":{"cve":[{"id":"CVE-2019-0541","description":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","status":"published","published":"2019-01-08T21:00:00Z","modified":"2025-10-21T23:45:44.79Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-1313","description":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","status":"published","published":"2019-01-08T21:00:00Z","modified":"2025-10-21T23:45:44Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:24.172282Z"}],"ghsa":[{"id":"GHSA-f832-7fhg-m78h","title":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly...","description":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","status":"published","published":"2022-05-13T01:16:05Z","modified":"2025-10-22T00:31:37Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:04:04.176931Z"}],"kev":[{"id":"CVE-2019-0541","title":"Microsoft MSHTML Remote Code Execution Vulnerability","description":"Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.","cwes":["CWE-77"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2019-0541","description":"A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka \"MSHTML Engine Remote Code Execution Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.","status":"published","published":"2019-01-08T21:29:00.47Z","modified":"2026-06-17T02:08:19.707Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:05:02.989216Z"}]}}