CVE-2019-0541
Microsoft MSHTML Remote Code Execution Vulnerability
CVSS
—
No CVSS
EPSS
53.2%
p99
KEV
YES
Nov 3, 2021
Exploit Today
80
0-100
Published: — · Last modified: —
53.2%EPSS · 30 days53.2%
2026-06-302026-07-16
Product
Microsoft / MSHTML
Vulnerability
Microsoft MSHTML Remote Code Execution Vulnerability
Added to KEV
Nov 3, 2021
Remediate by
May 3, 2022
Known ransomware use
No
Summary description
Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-0541
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2021-40444—99.9%
KEV—80Microsoft MSHTML Remote Code Execution Vulnerability—