CVE-2011-3396: Microsoft PowerPoint

High severity, CVSS 9.3. EPSS: 18.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability."

Affected products

• Microsoft PowerPoint: version 2007 only; version 2010 only

Published 2011-12-14. Last modified 2026-06-16.