CVE-2009-0556CISA KEV: Actively Exploited

Microsoft Office PowerPoint Code Injection Vulnerability

Published Jan 7, 2026·Updated Jan 7, 2026

Description

Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free