Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-88178: PowerPoint may let attackers run code remotely
CVE-2026-88178 · published today
Summary
Microsoft PowerPoint in several Office 365 and Office LTSC versions can be tricked into running malicious code from a network source. This could let an unauthorized person take control of the affected computer. Install the latest updates from Microsoft as soon as they are available to protect against this risk.
What to do
- Update microsoft microsoft office 365 for mac to version publication or later.
- Update microsoft microsoft office ltsc 2021 to version 16.0.14334.20974 or later.
- Update microsoft microsoft office ltsc 2024 to version 16.0.17932.21056 or later.
- Update microsoft microsoft office ltsc for mac 2021 to version publication or later.
- Update microsoft microsoft office ltsc for mac 2024 to version publication or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | microsoft 365 apps for enterprise | 16.0.1 |
| microsoft | microsoft office 365 for mac | < publication |
| microsoft | microsoft office ltsc 2021 | < 16.0.14334.20974 |
| microsoft | microsoft office ltsc 2024 | < 16.0.17932.21056 |
| microsoft | microsoft office ltsc for mac 2021 | < publication |
| microsoft | microsoft office ltsc for mac 2024 | < publication |
Original advisory text
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-416Use After Free
Timeline
Published13 Oct 2026
Updated14 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta