Microsoft Office PowerPoint vulnerabilities

15 CVEs affecting Microsoft Office PowerPoint, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0202, published 2009-06-11.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability, published 2009-04-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-01-07. EPSS: 67.3% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an…
• CVE-2009-1130, published 2009-05-12. High severity, CVSS 9.3. EPSS: 39.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted…
• CVE-2009-0221, published 2009-05-12. High severity, CVSS 9.3. EPSS: 37.9% chance of exploitation in the next 30 days. Integer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a PowerPoint file containing a crafted record type for "collaboration…
• CVE-2009-0220, published 2009-05-12. High severity, CVSS 9.3. EPSS: 37.1% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the PowerPoint 4.0 importer (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via…
• CVE-2009-1131, published 2009-05-12. High severity, CVSS 9.3. EPSS: 35.9% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a…
• CVE-2009-1129, published 2009-05-12. High severity, CVSS 9.3. EPSS: 35.7% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via…
• CVE-2009-0227, published 2009-05-12. High severity, CVSS 9.3. EPSS: 35.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in the PowerPoint 4.2 conversion filter (PP4X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via…
• CVE-2009-0226, published 2009-05-12. High severity, CVSS 9.3. EPSS: 34.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in the PowerPoint 4.2 conversion filter in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via a long string…
• CVE-2009-1137, published 2009-05-12. High severity, CVSS 9.3. EPSS: 31.6% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading…
• CVE-2009-0222, published 2009-05-12. High severity, CVSS 9.3. EPSS: 31.6% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading…

Latest

• CVE-2009-0202, published 2009-06-11. High severity, CVSS 9.3. EPSS: 23.6% chance of exploitation in the next 30 days. Array index error in FL21WIN.DLL in the PowerPoint Freelance Windows 2.1 Translator in Microsoft PowerPoint 2000 and 2002 allows remote attackers to execute arbitrary code via a Freelance file with…
• CVE-2009-1128, published 2009-05-12. High severity, CVSS 9.3. EPSS: 27.5% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading…
• CVE-2009-0225, published 2009-05-12. High severity, CVSS 9.3. EPSS: 31.1% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to improper "array…
• CVE-2009-0224, published 2009-05-12. High severity, CVSS 9.3. EPSS: 30.1% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML…