Microsoft PowerPoint vulnerabilities

86 CVEs affecting Microsoft PowerPoint, 4 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78513, published 2026-09-08.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0556: Microsoft Office PowerPoint Code Injection Vulnerability, published 2009-04-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2026-01-07. EPSS: 67.3% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an…
• CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability, published 2010-11-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 58.6% chance of exploitation in the next 30 days. Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow…
• CVE-2007-0671: Microsoft Office Excel Remote Code Execution Vulnerability, published 2007-02-03. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-08-12. EPSS: 43.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack…
• CVE-2015-2424: Microsoft PowerPoint Memory Corruption Vulnerability, published 2015-07-14. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 40.4% chance of exploitation in the next 30 days. Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or…
• CVE-2010-0033, published 2010-02-10. High severity, CVSS 9.3. EPSS: 51.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record…
• CVE-2004-0200, published 2004-09-28. High severity, CVSS 9.3. EPSS: 49% chance of exploitation in the next 30 days. Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with…
• CVE-2006-3449, published 2006-08-09. High severity, CVSS 7.5. EPSS: 42.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed record in the BIFF…
• CVE-2015-0097, published 2015-03-11. High severity, CVSS 9.3. EPSS: 40.9% chance of exploitation in the next 30 days. Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document,…
• CVE-2009-0224, published 2009-05-12. High severity, CVSS 9.3. EPSS: 30.1% chance of exploitation in the next 30 days. Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML…
• CVE-2011-0656, published 2011-04-13. High severity, CVSS 9.3. EPSS: 29.6% chance of exploitation in the next 30 days. Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint…

Latest

• CVE-2026-78513, published 2026-09-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
• CVE-2026-72977, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-72975, published 2026-09-08. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
• CVE-2026-69797, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-69767, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-69678, published 2026-09-08. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
• CVE-2026-68809, published 2026-08-11. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
• CVE-2026-55123, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
• CVE-2026-55120, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
• CVE-2026-55043, published 2026-07-14. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.