{"id":"CVE-2026-88144","published":"2026-10-13T19:21:34.147","lastModified":"2026-10-15T21:19:04.110","description":"Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["microsoft"],"products":["365 apps","microsoft 365","office 2021","office 2024"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88144","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Microsoft Office PowerPoint allows remote attackers to execute arbitrary code on affected systems. This flaw occurs when the application frees memory that's still being referenced, potentially leading to code execution through crafted PowerPoint files.","exploitability":"Exploitation requires a user to open a malicious PowerPoint file, making it moderately difficult but achievable through social engineering or phishing campaigns.","blast_radius":"The vulnerability affects Microsoft 365 apps, Office 2021, and Office 2024, potentially impacting thousands of users across organizations who regularly open PowerPoint files from untrusted sources.","remediation":"Deploy the Microsoft Office update KB5042847 or later to fix this vulnerability in affected Office versions.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","office","ppt","memory-corruption"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:04:39.794Z"}}