Microsoft Office PowerPoint Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in Microsoft Office PowerPoint. This vulnerability allows an unauthorized attacker to execute code locally. It affects several different versions and editions of PowerPoint, including 2019, 2021, and 2024, as well as Microsoft 365 Apps for Enterprise. The vulnerability arises from improper memory management, leading to a use-after-free condition that can be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. For Microsoft 365 Apps for Enterprise, security update instructions are available on the Microsoft 365 Apps Security Updates page.