CVE-2019-5030

A buffer overflow vulnerability exists in the PowerPoint document conversion function of Rainbow PDF Office Server Document Converter V7.0 Pro MR1 7,0,2019,0220. While parsing a document text info container, the TxMasterStyleAtom::parse function is incorrectly checking the bounds corresponding to...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

PT-2025-1240 · Microsoft · Office Word +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Description: The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps fo...

January 7, 2025, update for PowerPoint 2016 (KB5002632)

January 7, 2025, update for PowerPoint 2016 KB5002632 This article describes update 5002632 for Microsoft PowerPoint 2016 that was released on January 7, 2025.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2016. It doesn't...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-39804

A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint's access privileges, leading to a permission bypass. A malicious application could inject a library and start the program to trigger this vulnerability and then ma...

CVE-2024-39804

CVE-2024-39804 concerns Microsoft PowerPoint 16.83 on macOS. Talos/Cisco documents describe a library-injection vulnerability enabled by libraries loaded via relative paths and the hardened runtime with the entitlement com.apple.security.cs.disable-library-validation set to true. An attacker coul...

Microsoft Office PowerPoint PPTX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the Microsoft PowerPoint presentation preparation program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation program is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially created...

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system's permissions-based model, which revolves around the Transparency, Consent, and Control TCC...

Microsoft Office PowerPoint Resource Management Error Vulnerability

Microsoft Office PowerPoint is an American Microsoft Microsoft company's software for creating, presentations PPT. A resource management error vulnerability exists in Microsoft Office PowerPoint. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Microsoft Office PowerPoint 数据伪造问题漏洞

Microsoft Office PowerPoint is a software used to create, presentations PPT by Microsoft Corporation USA. A data forgery vulnerability exists in Microsoft Office PowerPoint version 16.83, which stems from a specially crafted library in the macOS version that can be exploited to gain access to...

Microsoft PowerPoint for macOS library injection vulnerability

Talos Vulnerability Report TALOS-2024-1974 Microsoft PowerPoint for macOS library injection vulnerability August 19, 2024 CVE Number CVE-2024-39804 SUMMARY A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS. A specially crafted library can leverage PowerPoint’s acces...

Security Updates for Microsoft PowerPoint Products (August 2024)

The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2024-38171 %NASLMINLEVEL 8090...

Microsoft PowerPoint 2016 RCE Vulnerability (KB5002586)

This host is missing an important security update according to Microsoft KB5002586 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office for Mac Multiple Remote Code Execution Vulnerabilities (Aug 2024) - Mac OS X

This host is missing an important security update for Microsoft Office 2021 for Mac according to Microsoft security update August 2024 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2024-38171

Microsoft PowerPoint Remote Code Execution Vulnerability...