CVE-2026-88207
CVE-2026-88207 · Microsoft Office PowerPoint Remote Code Execution Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
CVSS 7.5 · High · EPSS 0.5% · Fix available
- Published
- Updated
Affected products and versions
microsoft 365 apps for enterprise
- Versions
- ≥ 16.0.1, < https://aka.ms/OfficeSecurityReleases: Affected (custom)
No fix published
microsoft office 365 for mac
- Versions
- ≥ 1.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc 2021
- Versions
- ≥ 16.0.1, < 16.0.14334.20974: Affected (custom)
Update to 16.0.14334.20974
microsoft office ltsc 2024
- Versions
- ≥ 16.0.0, < 16.0.17932.21056: Affected (custom)
Update to 16.0.17932.21056
microsoft office ltsc for mac 2021
- Versions
- ≥ 16.0.1, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123
microsoft office ltsc for mac 2024
- Versions
- ≥ 16.0.0, < 16.114.26101123: Affected (custom)
Update to 16.114.26101123