654 matches found
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint: PoC удаленного выполнения кода через Use-After-Free UAF Обзор Этот репозиторий содержит PoC-эксплойт Proof of Concept для уязвимости CVE-2025-47175 , обнаруженной в Microsoft PowerPoint. Уязвимость представляет собой ошибку типа Use-After-Free UAF, которая...
CVE-2017-8759
CVE-2017-8759 Этот репозиторий содержит примеры эксплойтов для CVE-2017-8759 для Microsoft PowerPoint, а также описание того, как подобные уязвимости были и могут быть использованы с помощью тех же методов. Немного предыстории Цель публикации этого репозитория — осветить альтернативные методы...
ppsx-file-generator
Введение Автор: Temesgen Yibeltal [email protected] на основе кода https://github.com/bhdresh/CVE-2017-8570 теперь удалён ppsx-file-generator — это инструмент на Python, который создаёт файл слайд-шоу PowerPoint, выполняющий код из удалённого источника на основе существующего файла. Что он...
Security Updates for Microsoft PowerPoint Products (September 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...
CVE-2026-78513
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-72975
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
EUVD-2026-73837
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72938
CVE-2026-72938 is an information disclosure vulnerability in Microsoft Office PowerPoint caused by a type confusion flaw (accessing a resource using an incompatible type). An unauthorized attacker can exploit this over a network with low complexity and no privileges , though user interaction is r...
EUVD-2026-73729
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-69678
Microsoft Office PowerPoint is affected by a use-after-free vulnerability that allows an unauthorized attacker to achieve remote code execution over a network, rated CVSS 8.8 (HIGH) with user interaction required and no prior privileges. The attack vector is network-based with low complexity, yie...
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
PT-2026-88044
Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read exists in Microsoft Office PowerPoint, which could allow an unauthorized attacker to disclose information over a network. An out-of-bounds read occur...
PT-2026-88017
Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read exists in Microsoft Office PowerPoint, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An...
Security Updates for Microsoft PowerPoint Products C2R (August 2026)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. CVE-2026-68809 Note that Nessus has not tested for this...
The vulnerability of Microsoft PowerPoint presentation preparation programs, Microsoft Office packages, and 365 Apps for Enterprise, related to insufficient validation of input data, allows attackers to disclose protected information.
The vulnerability of Microsoft PowerPoint presentation templates, Microsoft Office packages, and 365 Apps for Enterprise lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose protected information...
CVE-2026-70322
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...