CVE-2009-0556 Microsoft Office
Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Office PowerPoint Code Injection Vulnerability
- Added
- 2026-01-07
- Federal patch deadline
- 2026-01-28
- Ransomware use
- not known