CVE-2026-108454
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An attacker may access application memory, leading to the leakage of potentially sensitive information. This requires delivering a crafted document to the victim.
Recommendation
Apply the latest Microsoft Office security updates for PowerPoint. Do not open documents from untrusted sources.
Other vulnerabilities in Microsoft Office PowerPoint
See all- CVE-2026-41102High
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.
- CVE-2026-88178Critical
Use-after-free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- CVE-2026-108455Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
- CVE-2026-108453Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
- CVE-2026-97744Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. The attacker can read data outside the intended memory bounds.
- CVE-2026-97005Medium
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
- CVE-2026-88207High
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
- CVE-2026-88203Medium
An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
- CVE-2026-88183Medium
An out-of-bounds read vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
- CVE-2026-88144High
A use after free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS