ppsx-file-generator

소개 작성자: Temesgen Yibeltal [email protected] 코드 기반: https://github.com/bhdresh/CVE-2017-8570 현재 삭제됨 ppsx-file-generator는 기존 파일을 기반으로 원격 소스에서 코드를 실행하는 파워포인트 슬라이드 쇼 파일을 생성하는 파이썬 도구입니다. 기능 이 도구는 입력된 내용을 바탕으로 파워포인트 슬라이드 쇼 파일과 XML 파일을 생성합니다. 파워포인트 파일은 페이로드 파일의 정보를 담고 있는 XML 파일에 접근합니다. 공격자는 로컬 또는 공...

CVE-2017-8759

CVE-2017-8759 このリポジトリには、Microsoft PowerPoint向けCVE-2017-8759のサンプルエクスプロイトと、同様の脆弱性が同じ手法でどのように悪用されたか、また悪用され得るかについての説明が含まれています。 背景...

mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE

CVE-2025-47175 - Microsoft PowerPoint 해제 후 사용UAF 원격 코드 실행 PoC 개요 이 저장소는 Microsoft PowerPoint에서 발견된 CVE-2025-47175 취약점에 대한 PoC개념 증명 익스플로잇을 포함합니다. 이 취약점은 UAF해제 후 사용 버그로, 공격자가 사용자가 특수하게 제작된 PPTX 파일을 열도록 속여 임의 코드를 실행할 수 있게 합니다. 설명 취약점: Microsoft PowerPoint의 UAF해제 후 사용 CVE ID: CVE-2025-47175 영향받는 버전:...

Security Updates for Microsoft PowerPoint Products (September 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...

CVE-2026-78513

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-72975

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

EUVD-2026-73837

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72938

CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...

EUVD-2026-73729

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-69678

Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...

Microsoft Office PowerPoint Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

PT-2026-88017

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read exists in Microsoft Office PowerPoint, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An...

PT-2026-88044

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read exists in Microsoft Office PowerPoint, which could allow an unauthorized attacker to disclose information over a network. An out-of-bounds read occur...

Security Updates for Microsoft PowerPoint Products C2R (August 2026)

The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...

The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Microsoft PowerPoint presentation templates, Microsoft Office packages, and 365 Apps for Enterprise lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2026-70322

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70316

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-70313

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...