CVE-2026-70215

Summary

A use-after-free vulnerability in Microsoft PowerPoint allows remote attackers to execute arbitrary code when a malicious file is opened. This occurs when the application frees memory that is still being referenced, potentially leading to memory corruption and code execution.

Exploitability

Exploitation requires user interaction via opening a malicious PowerPoint file, making it moderately difficult but achievable through social engineering or phishing campaigns.

Blast radius

The vulnerability affects Microsoft 365 apps including Office 2021 and Office 2024, potentially impacting thousands of users across organizations when they open infected presentation files.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft Office update KB5040000 or later to address this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.