High severity · published Jan 8, 2019
CVE-2019-0541
Microsoft MSHTML Remote Code Execution Vulnerability
In wildKEV
8.8
CVSS
53.2%
EPSS
Yes
On KEV
Description
A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)53.2% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 3, 2021
Federal remediation dueMay 3, 2022
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition); +3 more · source: vendor, NVD
IE
Internet Explorer 10 · Microsoft
Windows Server 2012 · source: vendor
IE
Internet Explorer 11 · Microsoft
Windows 10 for 32-bit Systems; Windows 10 for x64-based Systems; Windows 10 Version 1607 for 32-bit Systems; Windows 10 Version 1607 for x64-based Systems; Windows 10 Version 1703 for 32-bit Systems; Windows 10 Version 1703 for x64-based Systems; +18 more · source: vendor
IE
Internet Explorer 9 · Microsoft
Windows Server 2008 for 32-bit Systems Service Pack 2; Windows Server 2008 for x64-based Systems Service Pack 2 · source: vendor
ME
Microsoft Excel Viewer · Microsoft
2007 Service Pack 3 · source: vendor
MO
Microsoft Office Word Viewer · Microsoft
Microsoft Office Word Viewer · source: vendor
EV
Excel Viewer · Microsoft
2007 · source: NVD
IE
Internet Explorer · Microsoft
11; 9; 10 · source: NVD
O3
Office 365 Proplus · Microsoft
All versions, or not specified · source: NVD
OW
Office Word Viewer · Microsoft
All versions, or not specified · source: NVD
MS
MSHTML · Microsoft
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0541
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0541
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_CONFIRM
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541
exploit
https://www.exploit-db.com/exploits/46536/
vdb-entry
http://www.securityfocus.com/bid/106402
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability