1721 matches found
CVE-2026-72938
CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...
EUVD-2026-73731
Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73729
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72956
CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...
EUVD-2026-73310
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-78513
CVE-2026-78513 is an out-of-bounds read in Microsoft Office PowerPoint that allows an unauthorized local attacker to disclose information . The vulnerability requires user interaction (e.g., opening a crafted file) but no prior privileges. CVSS 3.1 score is 5.5 (MEDIUM) with high confidentiality ...
EUVD-2026-73244
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-69797
CVE-2026-69797 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The attacker must persuade a user to open a crafted file, as the CVSS vector includes user interaction required (CVSS 3.1: 8.8 HIGH...
EUVD-2026-73243
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-69767
CVE-2026-69767 is a use after free vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning exploitation requires user interacti...
CVE-2026-69678
Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...
EUVD-2026-73149
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint Use-After-Free UAF Remote Code Execution PoC Overview This repository contains a Proof of Concept PoC exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free UAF bug that allows an attacker to execute...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
Microsoft Office PowerPoint Information Disclosure Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2017-8759
CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...
Astra Linux – Vulnerability in LibreOffice
LibreOffice can import presentations in the legacy PPT format. There was a stack buffer overflow issue when importing a color-replacement record. Two fixed-size color tables were populated from the file, but the write position was not reset between these two operations on the record. As a result,...
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
