Read the docs
TI-2026-29736 Aliases CVE-2026-41102GHSA-4qv5-2qmr-5xhv

Microsoft PowerPoint for Android Spoofing Vulnerability

Priority LOW 33CWE-284Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.

Summary

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00292 21st percentileScored 2026-11-07
Fix Fixed Microsoft PowerPoint for Android (Microsoft): 16.0.19822.20190

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftMicrosoft PowerPoint for Android16.0.0.0 to before 16.0.19822.2019016.0.19822.20190Patch availableCNA
  • Microsoft PowerPoint for Android VendorMicrosoft Affected 16.0.0.0 to before 16.0.19822.20190 Fixed in 16.0.19822.20190 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:android:*:*before 16.0.19822.20190VulnerableMicrosoft
  • cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:android:*:* Versions before 16.0.19822.20190 Vulnerable ·Microsoft

Remediation

  • Fix · CNA Microsoft PowerPoint for Android (Microsoft) Fixed in 16.0.19822.20190

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Spoofing
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Unlikely
ProductStatusPlan or fix
Microsoft PowerPoint for AndroidFixed 16.0.19822.20190 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-41102
  2. 2026-10-03 Alias added: GHSA-4qv5-2qmr-5xhv

References

Patch 1

  • TI-2015-02130 Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2… KEVCVSS 3.1HIGH 8.8
  • TI-2009-00535 Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft… KEVCVSS 3.1HIGH 8.8
  • TI-2007-00655 Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and… KEVCVSS 3.1HIGH 8.8
  • TI-2010-02469 Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to… KEVCVSS 3.1HIGH 7.8
  • TI-2010-00033 Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote… CVSS 2.0HIGH 9.3
  • TI-2004-00171 Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device… CVSS 2.0HIGH 9.3
See all 85 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences