Microsoft Office PowerPoint Use-After-Free Vulnerability Leading to Local Remote Code Execution

Vulnerability

A use-after-free vulnerability has been identified in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally on the affected system. The vulnerability arises from improper memory management, which can be exploited by manipulating the way PowerPoint handles certain objects.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. For specific guidance on downloading and installing the update, refer to the Microsoft Knowledge Base articles linked in the product update details.

Added: Oct 14, 2025, 6:18 PM
Updated: Oct 14, 2025, 8:44 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.8
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.