2055 matches found
CVE-2017-8759
CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...
ppsx-file-generator
Introduction By Temesgen Yibeltal [email protected] Based on code by https://github.com/bhdresh/CVE-2017-8570 now removed ppsx-file-generator is a python tool that generates a power point slide show file that executes code from a remote source based on an existing file. What does it do? The...
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint Use-After-Free UAF Remote Code Execution PoC Overview This repository contains a Proof of Concept PoC exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint. The vulnerability is a Use-After-Free UAF bug that allows an attacker to execute...
CVE-2022-30190_EXP_PowerPoint
CVE-2022-30190EXPPowerPoint This is exploit of CVE-2022-30190 on PowerPoint. Modify the suffix of the file to 'zip' and unzip the file, you can edit \ppt\slides\rels\slide1.xml.rels and replace to your vps ip:port like this, then compress them as the same way and change the suffix to 'ppsx'. The...
Vulnerabilities fixed in Microsoft Office
Microsoft has addressed vulnerabilities in various Office products. A malicious actor could exploit these vulnerabilities to carry out attacks that could result in the types of damage listed in the tables below. Microsoft has addressed multiple vulnerabilities in Office. The two most serious...
CVE-2026-116922
Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-112737
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-112738
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-112734
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-109487
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
EUVD-2026-122610
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-120001
A heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. This vulnerability is associated with CWE-122 . While specific technical details regarding the vulnerable component or root cause are not explicitly detailed in the provided...
EUVD-2026-122517
Access of resource using incompatible type 'type confusion' in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-116922
A type confusion vulnerability (CWE-843) in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This vulnerability enables the access of resources using incompatible types. While exploitation details are not provided in the documents, a sighting was...
CVE-2026-120005
A heap-based buffer overflow flaw in Microsoft Office PowerPoint allows an unauthenticated attacker to achieve remote code execution (RCE) over a network. This vulnerability is part of the November 2026 security updates and is classified as a critical severity risk. While the specific version num...
EUVD-2026-122281
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
EUVD-2026-122223
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-112737
A Use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. The vulnerability has a High severity rating (CVSS 3.1 score of 8.8), where an attacker could potentially compromise confidentiality, integrity, and availability. While th...
CVE-2026-112738
An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 . While specific component details and exploit code are not provided in the documents, the vulnerability has a ME...