CVE-2019-0541VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2019-0541: Microsoft MSHTML Remote Code Execution Vulnerability

Affects Microsoft MSHTMLSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 53.2% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-0541 (opens in a new tab)

Description

CVE-2019-0541 is a remote code execution vulnerability in the Microsoft MSHTML engine caused by improper input validation. This flaw allows attackers to execute arbitrary code remotely. It has been exploited in the wild, indicating active use by threat actors. The vulnerability is rated as high severity due to its potential impact on affected systems.

Summary

Microsoft's MSHTML engine contains an input validation vulnerability (CWE-77) that enables remote code execution. This vulnerability allows attackers to execute arbitrary code remotely by exploiting improper input validation within the MSHTML engine. It has been observed in active exploitation campaigns, underscoring its critical nature. No specific affected versions or patch information are provided in the input data.

Impact

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected systems, potentially leading to full system compromise. Given that it is exploited in the wild, the risk to unpatched systems is significant.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories closely and apply any available updates promptly once released.

Weaknesses

CWE-77Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:11:34 UTC

Weaknesses

References

Related threats