CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-01-08
Microsoft MSHTML Engine Remote Code Execution Vulnerability (CVE-2019-0541) Technical Analysis and Hardening Guide
[Affected Scope] Internet Explorer 9/10/11, Microsoft Office, Word/Excel Viewer, and Office 365 ProPlus utilizing the MSHTML rendering engine
[Impact] Remote attackers can execute arbitrary code with the privileges of the active user via crafted web content or malicious Office documents
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict MSHTML control execution via registry hardening