CVE-2011-3396

CVE-2011-3396 is an untrusted search path vulnerability affecting Microsoft PowerPoint 2007 SP2 and 2010. This flaw allows local users to achieve privilege escalation by introducing a malicious DLL into the current working directory, which PowerPoint then insecurely loads. With a CVSS score of 9.3, this vulnerability is critical, indicating a network-exploitable attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.