CVE-2019-0541

Microsoft MSHTML Remote Code Execution Vulnerability

8.8
CVSS 3.1
53.2 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Microsoft / MSHTML

Published: 2019-01-08 · Due (CISA): 2022-05-03

CWE: CWE-77 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
exploitdb46536Microsoft Windows MSHTML Engine - 'Edit' Remote Code Execution2019-03-13

References only — no downloads or instructions.

Sources