Heap-based Buffer Overflow in Microsoft Office PowerPoint
CVE-2026-120001
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 10 November 2026
What is CVE-2026-120001?
A vulnerability exists in Microsoft Office PowerPoint that allows an unauthorized attacker to exploit a heap-based buffer overflow. Through crafted documents sent over a network, an attacker could execute malicious code on the target system, potentially compromising its integrity and security. It is crucial for users to ensure their software is up-to-date and to be cautious when handling unsolicited or untrusted files.
Affected Version(s)
Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1
Microsoft Office 365 for Mac 1.0.0 < 16.115.26110837
Microsoft Office LTSC 2021 32-bit Systems 16.0.1 < 16.0.14334.21048