High severity7.8NVD Advisory· Published Apr 14, 2026· Updated Apr 28, 2026
CVE-2026-32200
CVE-2026-32200
Description
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
Affected products
9cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*+ 3 more
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*
- cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*
- cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32200nvdVendor Advisory
News mentions
42- Deepfake sextortion forces schools to remove student photos from websitesMalwarebytes Labs · May 14, 2026
- CERN’s open source KiCad library gives the world 17,000 circuit board componentsHelp Net Security · May 14, 2026
- Texas sued Netflix over claims it secretly collected and sold users’ dataMalwarebytes Labs · May 13, 2026
- Microsoft says some users can't install Office on Windows 365 devicesBleepingComputer · May 13, 2026
- May 2026 Patch Tuesday: no zero-days but plenty to fixMalwarebytes Labs · May 13, 2026
- Patch Tuesday - May 2026Rapid7 Blog · May 13, 2026
- UK fines water supplier $1.3M for exposing data of 664k customersBleepingComputer · May 12, 2026
- Microsoft Patch Tuesday for May 2026 — Snort rules and prominent vulnerabilitiesCisco Talos Intelligence · May 12, 2026
- Microsoft May 2026 Patch Tuesday, (Tue, May 12th)SANS Internet Storm Center · May 12, 2026
- Microsoft’s May 2026 Patch Tuesday Addresses 118 CVEs (CVE-2026-41103)Tenable Blog · May 12, 2026
- Japan’s PM orders cybersecurity review to stop Mythos going full CyberZillaThe Register Security · May 12, 2026
- FCC pushes ban on security updates for foreign-made routers, drones to 2029The Record · May 11, 2026
- Poor security left hackers inside water company network for nearly two yearsHelp Net Security · May 11, 2026
- UK water company allowed hackers to lurk undetected for nearly two years, regulator findsThe Record · May 11, 2026
- Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security · May 10, 2026
- Unplug your way to better codeCisco Talos Intelligence · May 7, 2026
- Why Security in 2026 Requires Continuous Threat and Exposure Management (CTEM) at ScaleRapid7 Blog · May 7, 2026
- Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug APIThe Hacker News · May 5, 2026
- Weaver E-cology critical bug exploited in attacks since MarchBleepingComputer · May 4, 2026
- 15-year-old detained over massive data breach at French government agencyHelp Net Security · May 4, 2026
- Your work apps are quietly handing 19 data points to someoneHelp Net Security · May 4, 2026
- Passport to £££: Home Office adds £216M to travel doc contract before a single bid's been placedThe Register Security · May 1, 2026
- Passport to £££: Home Office adds £216M to travel doc contract before a single bid's been placedThe Register Security · May 1, 2026
- French prosecutors link 15-year-old to mega-breach at state’s secure document agencyThe Register Security · Apr 30, 2026
- VECT: Ransomware by design, Wiper by accidentCheck Point Research · Apr 28, 2026
- Chinese engineer stole US military and NASA software for yearsMalwarebytes Labs · Apr 28, 2026
- ICO chief John Edwards steps back as workplace probe quietly unfoldsThe Register Security · Apr 27, 2026
- The Good, the Bad and the Ugly in Cybersecurity – Week 17SentinelOne Labs · Apr 24, 2026
- NASA Employees Duped in Chinese Phishing Scheme Targeting U.S. Defense SoftwareThe Hacker News · Apr 24, 2026
- Five steps to become Mythos readyTenable Blog · Apr 23, 2026
- More than pretty pictures: Wendy Bishop on visual storytelling in techCisco Talos Intelligence · Apr 16, 2026
- Patch Tuesday - April 2026Rapid7 Blog · Apr 14, 2026
- Microsoft Patch Tuesday for April 2026 - Snort Rule and Prominent VulnerabilitiesCisco Talos Intelligence · Apr 14, 2026
- 13th April – Threat Intelligence ReportCheck Point Research · Apr 13, 2026
- The Good, the Bad and the Ugly in Cybersecurity – Week 15SentinelOne Labs · Apr 10, 2026
- Risky Business #832 -- Anthropic unveils magical 0day computer GodRisky Business · Apr 8, 2026
- Russia Hacked Routers to Steal Microsoft Office TokensKrebs on Security · Apr 7, 2026
- Feds Disrupt IoT Botnets Behind Huge DDoS AttacksKrebs on Security · Mar 20, 2026
- Microsoft Patch Tuesday, March 2026 EditionKrebs on Security · Mar 11, 2026
- Risky Business #826 -- A week of AI mishaps and skulduggeryRisky Business · Feb 25, 2026
- Risky Business #824 -- Microsoft's Secure Future is looking a bit wobblyRisky Business · Feb 11, 2026
- Defending Against China-Nexus Covert Networks of Compromised DevicesCISA Alerts