Microsoft Powerpoint vulnerabilities, page 4
85 vulnerabilities
Known vulnerabilities in Microsoft Powerpoint, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-1462microsoftmicrosoft office+4
EPSS score17.68%
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.CVE-2026-41102microsoftmicrosoft powerpoint for android+1EPSS score0.31%
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.CVE-2026-55043microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-55123microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-55120microsoft365_apps+13EPSS score0.47%
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-68809microsoft365_apps+9EPSS score0.43%
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-26133microsoft365_copilot+29EPSS score0.56%
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.CVE-2026-69797microsoft365_apps+13EPSS score0.82%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-69767microsoft365_apps+13EPSS score0.82%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-69678microsoft365_apps+13EPSS score0.82%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-44803microsoftexcel+32EPSS score0.47%
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.CVE-2026-44812microsoftexcel+32EPSS score0.47%
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.CVE-2026-45649microsoftexcel+5EPSS score0.44%
Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally.CVE-2026-32200microsoft365_apps+8EPSS score0.47%
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2026-78513microsoft365_apps+13EPSS score0.54%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-72977microsoft365_apps+13EPSS score0.97%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2026-72975microsoft365_apps+13EPSS score0.92%
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.CVE-2006-0022microsoftpowerpointEPSS score14.54%
Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.CVE-2006-5296microsoftpowerpointEPSS score26.98%
PowerPoint in Microsoft Office 2003 does not properly handle a container object whose position value exceeds the record length, which allows user-assisted attackers to cause a denial of service (NULL dereference and application crash) via a crafted PowerPoint (.PPT) file, as demonstrated by Nanika.ppt, and a different vulnerability than CVE-2006-3435, CVE-2006-3876, CVE-2006-3877, and CVE-2006-4694. NOTE: the impact of this issue was originally claimed to be arbitrary code execution, but later analysis demonstrated that this was erroneous.CVE-2006-3590microsoftpowerpointEPSS score14.26%
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493.