Priority LOW 31
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00922 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 31
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00967 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority LOW 26
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00541 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-125
Priority MEDIUM 42
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority MEDIUM 42
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00819 · Published 2026-09-08 · Fixed in 16.0.20326.20138, 16.0.10417.20207 +4 CWE-416
Priority LOW 25
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00435 · Published 2026-08-11 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5565.1001 CWE-459
Priority LOW 36
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +1 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +1 CWE-122
Priority LOW 36
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00466 · Published 2026-07-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.111.26071215 +1 CWE-122
Priority LOW 37
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00522 · Published 2026-06-09 · Fixed in 16.0.20131.20024, 10.0.14393.9234 +11 CWE-190
Priority LOW 37
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00522 · Published 2026-06-09 · Fixed in 16.0.20131.20024, 10.0.14393.9234 +11 CWE-190
Priority LOW 34
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00428 · Published 2026-06-09 · Fixed in 16.0.20131.20024 CWE-284
Priority LOW 33
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00292 · Published 2026-05-12 · Fixed in 16.0.19822.20190 CWE-284
Priority LOW 36
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00323 · Published 2026-04-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5548.1001 CWE-416
Priority LOW 32
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00494 · Published 2026-03-13 · Fixed in 16.0.19815.10000, 2.107.2 +9 CWE-77
Priority LOW 36
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00381 · Published 2025-10-14 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5522.1000 CWE-416
Priority LOW 37
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00594 · Published 2025-09-09 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5517.1000 CWE-416
Priority LOW 37
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00528 · Published 2025-08-12 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.0.5513.1000 CWE-416
Priority LOW 36
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00444 · Published 2025-07-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.99.25071321 +1 CWE-122
Priority LOW 33
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.0038 · Published 2025-07-08 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.99.25071321 +2 CWE-416
Priority MEDIUM 41
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02504 · Published 2025-06-10 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.98.25060824 +1 CWE-416
Priority MEDIUM 43
A library injection vulnerability exists in Microsoft PowerPoint 16.83 for macOS.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00889 · Published 2024-12-18 · No fix listed CWE-347
Priority LOW 38
Microsoft PowerPoint Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00929 · Published 2024-08-13 · Fixed in https://aka.ms/OfficeSecurityReleases, 16.88.24081116 +1 CWE-416
Priority LOW 38
Microsoft Office Remote Code Execution Vulnerability
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01177 · Published 2024-02-13 · Fixed in 16.0.5435.1000, 16.0.5435.1001 +1 CWE-693
Load more
THREATIST.IORead the docs