CVE-2026-88183: Microsoft Office PowerPoint Information Disclosure Vulnerability
Microsoft Office PowerPoint Information Disclosure Vulnerability
Other sources
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.17932.21056 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in https://aka.ms/OfficeSecurityReleases - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.14334.20974
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker can be unauthorized and the attack vector is network-based, but user interaction is required. The available data does not specify the exact user action or delivery mechanism.
What is the likely impact if exploitation succeeds?
Successful exploitation can disclose information from Microsoft Office PowerPoint. The provided severity vector indicates high confidentiality impact, with no stated integrity or availability impact.
How severe is this vulnerability?
It is rated medium with a CVSS score of 6.5. The vector indicates low attack complexity and no privileges required, while requiring user interaction.