CVE-2026-108455: Microsoft Office PowerPoint Information Disclosure Vulnerability
Microsoft Office PowerPoint Information Disclosure Vulnerability
Other sources
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.114.26101123 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.17932.21056 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.14334.20974
Event History
Frequently Asked Questions
Does exploitation require an authenticated account or special privileges?
No privileges are required. The vector is network-based, but successful exploitation requires user interaction.
What is the expected security impact?
The stated impact is high confidentiality impact. No integrity or availability impact is indicated.