High severity7.8NVD Advisory· Published Apr 14, 2026· Updated Apr 28, 2026
CVE-2026-32200
CVE-2026-32200
Description
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Affected products
10cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*+ 3 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32200nvdVendor Advisory
News mentions
1- Patch Tuesday - April 2026Rapid7 Blog · Apr 14, 2026