653 matches found
CVE-2017-8759
CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint Use-After-Free UAF Remote Code Execution PoC Overview This repository contains a Proof of Concept PoC exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free UAF bug that allows an attacker to execute...
ppsx-file-generator
Introduction By Temesgen Yibeltal [email protected] Based on code by https://github.com/bhdresh/CVE-2017-8570 now removed ppsx-file-generator is a python tool that generates a power point slide show file that executes code from a remote source based on an existing file. What does it do? The...
Security Updates for Microsoft PowerPoint Products (September 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...
CVE-2026-78513
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-72975
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73837
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72938
CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...
EUVD-2026-73729
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-69678
Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
PT-2026-88017
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
PT-2026-88044
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disclose protected information.
The vulnerability of Microsoft PowerPoint presentation templates, Microsoft Office packages, and 365 Apps for Enterprise lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...
CVE-2026-70322
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...