Security Update for Microsoft PowerPoint Products (August 2026)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(334602);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/11");

  script_cve_id("CVE-2026-68809");
  script_xref(name:"MSKB", value:"5002899");
  script_xref(name:"MSFT", value:"MS26-5002899");

  script_name(english:"Security Update for Microsoft PowerPoint Products (August 2026)");

  script_set_attribute(attribute:"synopsis", value:
"The Microsoft PowerPoint Products are affected by an information disclosure vulnerability.");
  script_set_attribute(attribute:"description", value:
"The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an
information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an
unauthorized attacker to disclose information locally.

Note that Nessus has not tested for this issue but has instead relied only on the application's
self-reported version number.");
  script_set_attribute(attribute:"see_also", value:"https://support.microsoft.com/en-us/help/5002899");
  script_set_attribute(attribute:"solution", value:
"Microsoft has released KB5002899 to address this issue.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-68809");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/11");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:microsoft:powerpoint");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows : Microsoft Bulletins");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("office_installed.nasl", "microsoft_office_compatibility_pack_installed.nbin", "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl");
  script_require_keys("SMB/MS_Bulletin_Checks/Possible");
  script_require_ports(139, 445, "Host/patch_management_checks");

  exit(0);
}

include('vcf_extras_office.inc');

var bulletin = 'MS26-08';
var kbs = ['5002899'];

var constraints = [
  { 'kb':'5002899', 'channel':'MSI', 'fixed_version': '16.0.5565.1001', 'sp' : 0}
];

vcf::microsoft::office_product::check_version_and_report(
  kbs:kbs,
  constraints:constraints,
  severity:SECURITY_WARNING,
  bulletin:bulletin,
  subproduct:'PowerPoint'
);