high · CVSS v3 6.5
CVE-2026-108453
An out-of-bounds read vulnerability in Microsoft PowerPoint can allow an unauthorized attacker to read sensitive data over a network. The fl
Overview
An out-of-bounds read vulnerability in Microsoft PowerPoint can allow an unauthorized attacker to read sensitive data over a network. The flaw exists in the handling of certain presentation files and can be triggered without user interaction. It enables information disclosure to remote adversaries.
Description
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Impact
The vulnerability primarily affects confidentiality, exposing confidential presentation contents to attackers. It can be exploited by remote actors who can intercept or read data transmitted by the victim’s system. End users and organizations using PowerPoint are at risk of leaking proprietary or sensitive information.
Remediation
1. Install the latest Microsoft Office security updates or cumulative patches that address CVE-2026-108453. 2. Enable automatic updates for Office to ensure timely delivery of fixes. 3. Restrict network access for PowerPoint by applying firewall rules or network segmentation to limit exposure. 4. Use endpoint protection to detect anomalous read attempts and block suspicious activity. 5. Conduct regular vulnerability scans to confirm patch compliance.
Risk context
The CVSS v3 score of 6.5 indicates a high severity risk, though no EPSS data is available. Defenders should treat this as a high-priority issue and apply mitigations promptly.
Affected products
- Microsoft PowerPoint
- Microsoft Office
Scores
- Severity
- high
- CVSS v2
- 7.8
- CVSS v3
- 6.5
- CVSS v4
- —
- EPSS
- —