CVE-2026-32200

The CVE-2026-32200 entry involves a use-after-free vulnerability in Microsoft Office PowerPoint that could allow a local attacker to execute arbitrary code. Connected sources confirm affected products include Microsoft PowerPoint/PowerPoint 2016 and related Office components; root cause is use-af...

CVE-2026-44812

CVE-2026-44812 affects Windows graphics component Win32K GRFX, where an integer overflow/wraparound in GRFX can allow an unauthorized attacker to execute code locally. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). Exploitation details are not provide...

CVE-2006-3449

CVE-2006-3449 describes a remote code execution in Microsoft PowerPoint 2000–2003 caused by parsing a malformed BIFF record in a PPT file. The vulnerability can be triggered when a user opens a crafted PPT document, potentially allowing attacker-controlled code execution in the user’s context (us...

CVE-2026-68809

CVE-2026-68809 describes an information-disclosure flaw in Microsoft Office PowerPoint caused by incomplete cleanup. A local attacker could disclose information due to this cleanup issue. CVSS v3.1: 5.5 (Medium); Vector: Local; Privileges Required: None; User Interaction: Required; Scope: Unchang...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...

CVE-2010-3142

Microsoft Office PowerPoint 2007 contains an Untrusted search path (insecure library loading) vulnerability allowing local users, and possibly remote attackers, to hijack DLLs via a Trojan horse rpawinet.dll located in the same folder as specific PowerPoint-related files (.odp, .pothtml, .potm, ....

CVE-2000-0419

The Office 2000 UA ActiveX control is described as wrongly marked “safe for scripting.” This vulnerability allows an intruder to script interactions through the control’s Show Me feature, potentially disabling macro warnings and enabling arbitrary actions within Office applications (e.g., launchi...

CVE-2010-0029

CVE-2010-0029 is a remote-code-execution vulnerability in Microsoft Office PowerPoint 2002 SP3 caused by a buffer/stack overflow when parsing crafted PowerPoint files (PowerPoint File Path Handling Buffer Overflow). The connected reports confirm this is part of a family of PowerPoint vulnerabilit...

CVE-2010-0030

CVE-2010-0030 describes a remote code execution vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 caused by a heap-based buffer overflow in the LinkedSlideAtom handling. A crafted PowerPoint file could allow an attacker to take control of the affected system. The issue is part of...

CVE-2025-54908

CVE-2025-54908 describes a Use-After-Free vulnerability in Microsoft PowerPoint that allows local code execution when processing PowerPoint content. Multiple connected sources confirm a remote code execution risk in PowerPoint products due to this flaw, with Microsoft attributing the root cause t...

CVE-2000-0765

CVE-2000-0765 describes a buffer overflow in the HTML interpreter of Microsoft Office 2000 . An attacker could trigger the overflow via a long embedded object tag in HTML, allowing execution of arbitrary commands. The sources provide the vulnerability description but do not specify affected versi...

CVE-2007-0913

CVE-2007-0913 is described as an unspecified remote code execution vulnerability in Microsoft PowerPoint exploited by Trojan.PPDropper.G. Connected advisories (MS06-058 family) detail related PowerPoint memory corruption flaws caused by malformed records or non-container/malformed data in PPT par...

CVE-2025-49699

CVE-2025-49699 is a Microsoft Office remote-code-execution vulnerability caused by a use-after-free in Office components, enabling a local attacker to execute arbitrary code. Affected products include various Office apps; the underlying issue is use-after-free leading to code execution. Mitigatio...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0597

The CVE-2000-0597 entry concerns Microsoft Office 2000 (Excel and PowerPoint) and PowerPoint 97. The vulnerability arises because these products are marked as safe for scripting, enabling a remote attacker to coax Internet Explorer or some email clients to save files to arbitrary locations via th...

CVE-2001-0718

The CVE-2001-0718 issue affects Microsoft Excel and PowerPoint (across Windows and Macintosh releases up to 2002). Affected components are the macro handling/data stream processing; attackers can bypass macro restrictions by modifying the document data stream, enabling arbitrary code execution wh...

CVE-2010-3141

CVE-2010-3141 describes an Untrusted Search Path (DLL hijacking) vulnerability in Microsoft PowerPoint 2010. An attacker could trigger arbitrary code execution by placing aTrojan horse pptimpconv.dll in the same folder as an affected file type (e.g., .ppt, .pptx, .odp, etc.). The root cause is un...

CVE-2011-3396

CVE-2011-3396 affects Microsoft PowerPoint 2007 SP2 and 2010. The vulnerability arises from insecure DLL loading: PowerPoint can load a Trojan horse DLL from the current working directory, enabling arbitrary code execution under the attacker’s context. Connected sources corroborate an RCE through...

CVE-2006-3656

CVE-2006-3656 describes a memory corruption vulnerability in Microsoft PowerPoint 2003 caused by parsing a crafted PowerPoint file. The underlying issue is a vulnerability in PowerPoint 2003 (mso.dll) where malformed records/POWERPOINT content are not adequately validated, leading to potential ar...

CVE-2006-5296

CVE-2006-5296 is a PowerPoint parsing vulnerability in Microsoft PowerPoint (Office era) where a crafted PowerPoint PPT file can trigger a remote code execution through improper parsing of PPT records. The connected advisory (MS06-058 family) and related CPAI entries describe memory corruption ri...

CVE-2006-3660

CVE-2006-3655, CVE-2006-3656, CVE-2006-3590 describe a family of remote-code-execution/memory-corruption vulnerabilities in Microsoft PowerPoint 2003 tied to PowerPoint files. Specifically, CVE-2006-3590 (PowerPoint Mso.dll) is triggered by parsing a malformed PowerPoint file, allowing arbitrary ...

CVE-2006-3655

CVE-2006-3655, CVE-2006-3656, and related CVEs concern Microsoft PowerPoint 2003. The connected sources describe an attacker-assisted exploit via crafted PowerPoint files affecting PowerPoint 2003 (PowerPoint’s PowerPoint parsing/mso.dll and powerpnt.exe) that can lead to arbitrary code execution...

CVE-2026-41102

CVE-2026-41102 affects Microsoft Office PowerPoint with an improper access control, enabling a locally authenticated attacker to spoof content. Descriptions across sources indicate PowerPoint is the affected component, with the vulnerability enabling spoofing at local scope (attack vector: local;...

CVE-2001-0005

Microsoft PowerPoint 2000 is affected by a buffer overflow in the file loader’s parsing mechanism, allowing arbitrary code execution when a user opens a malicious PowerPoint file or views a malicious web page. The root cause is a parsing overflow in the loader that can be triggered by crafted inp...

CVE-2026-55043

CVE-2026-55043 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows an attacker to execute code locally. The vulnerability affects PowerPoint files (triggered by opening a crafted document) and is categorized with a high impact (local code execution) in CVSS 3.1, with exploi...

CVE-2026-55123

CVE-2026-55123 is a heap-based buffer overflow in Microsoft Office PowerPoint that allows local code execution when a user opens a malicious file or link. Affected component is PowerPoint within Microsoft Office; root cause is a heap-based overflow leading to arbitrary code execution. Microsoft’s...

CVE-1999-1474

CVE-1999-1474 concerns PowerPoint 95 and 97 where opening a document in a browser (e.g., Internet Explorer) could trigger an automatic execution of an application without user prompting. The available sources describe that remote attackers could cause an application to run automatically via the s...

CVE-2025-59238

CVE-2025-59238 is a use-after-free vulnerability in Microsoft Office PowerPoint that allows an attacker to execute code locally. The CVE is associated with PowerPoint components affected by the vulnerability, with the attacker having local access (attack vector: LOCAL), needing user interaction (...

CVE-2026-55120

CVE-2026-55120 is a heap-based buffer overflow in Microsoft Office PowerPoint that enables a local attacker to execute arbitrary code. The vulnerability is documented across multiple feeds (NVD, CIRCL, NCSC, CVE List) and is associated with PowerPoint, with exploitation requiring user interaction...

CVE-2025-53761

Summary (based on provided documents): CVE-2025-53761 is a use-after-free vulnerability in Microsoft Office PowerPoint that can allow an attacker with local access to execute code locally. The vulnerability is associated with PowerPoint and is addressed by the August 2025 security update (KB50027...