Microsoft Office PowerPoint Code Injection Vulnerability
Microsoft · Office
Date added (CISA)
2026-01-07
Remediation due
2026-01-28
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.