CVE-2026-108454
CVE-2026-108454 · Microsoft Office PowerPoint Information Disclosure Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVSS 6.5 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office 365 for mac
- Versions
- ≥ 1.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056
microsoft office ltsc for mac 2021
- Versions
- ≥ 16.0.1, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc for mac 2024
- Versions
- ≥ 16.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123