VYPR
← All advisories
High severity8.8CISA KEVNVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026

CVE-2019-0541

CVE-2019-0541

Description

A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • Microsoft/Excel Viewer2 versions
    cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
    • (no CPE)range: 2007 Service Pack 3
  • Microsoft/Internet Explorer7 versions
    cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: Windows Server 2012
    • (no CPE)range: Windows 10 for 32-bit Systems
    • (no CPE)range: Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft/Office7 versions
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 365 ProPlus for 32-bit Systems
  • Microsoft/Office 365 Proplus
    cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
  • Microsoft/Word Viewer2 versions
    cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
    • (no CPE)range: Microsoft Office Word Viewer
  • Microsoft/MSHTML Enginellm-fuzzy
  • Microsoft/Office Visiocpe-rescue
    Range: 2010 Service Pack 2 (32-bit editions)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.