Heap-based Buffer Overflow in Microsoft Office PowerPoint
CVE-2026-120001

8.8HIGH

What is CVE-2026-120001?

A vulnerability exists in Microsoft Office PowerPoint that allows an unauthorized attacker to exploit a heap-based buffer overflow. Through crafted documents sent over a network, an attacker could execute malicious code on the target system, potentially compromising its integrity and security. It is crucial for users to ensure their software is up-to-date and to be cautious when handling unsolicited or untrusted files.

Affected Version(s)

Microsoft 365 Apps for Enterprise 32-bit Systems 16.0.1

Microsoft Office 365 for Mac 1.0.0 < 16.115.26110837

Microsoft Office LTSC 2021 32-bit Systems 16.0.1 < 16.0.14334.21048

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.