Microsoft Office PowerPoint Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 07/01/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| office powerpoint | = 2004 | |
| powerpoint | = 2000= 2002= 2003 |
Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free