Powerpoint
Vendor:
First CVE: Dec 31, 1999 · Active for 26 years
79
Total CVEs
More Total CVEs than 99% of tracked products
3.4
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 68% of tracked products
5.1%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Powerpoint over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 31, 1999
26 years ago
Most Recent CVE
Jul 14, 2026
10 days ago
CVE Severity & Scoring
Powerpoint79 CVEs
10%
87%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local28 (35.4%)
Network9 (11.4%)
Unknown42 (53.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low36 (45.6%)
High1 (1.3%)
Unknown42 (53.2%)
User Interaction
None2 (2.5%)
Unknown42 (53.2%)
Required35 (44.3%)
Privileges Required
Low1 (1.3%)
High0 (0.0%)
None36 (45.6%)
Unknown42 (53.2%)
Top CVEs
Signals from CVEs in this product scope (79 CVEs).
79 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0556HIGH Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint fi | Apr 3, 2009 | 8.8 | 91 | YES | NO |
CVE-2010-2572HIGH Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer | Nov 10, 2010 | 7.8 | 89 | YES | NO |
CVE-2007-0671HIGH Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code v | Feb 3, 2007 | 8.8 | 84 | YES | NO |
CVE-2015-2424HIGH Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute a | Jul 14, 2015 | 8.8 | 82 | YES | NO |
CVE-2010-0033HIGH Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer Text | Feb 10, 2010 | 9.3 | 74 | NO | YES |
CVE-2004-0200HIGH Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via | Sep 28, 2004 | 9.3 | 68 | NO | YES |
CVE-2015-0097HIGH Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted | Mar 11, 2015 | 9.3 | 62 | NO | YES |
CVE-2010-3142HIGH Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attac | Aug 27, 2010 | 9.3 | 46 | NO | YES |
CVE-2010-3141HIGH Untrusted search path vulnerability in Microsoft PowerPoint 2010 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via | Aug 27, 2010 | 9.3 | 44 | NO | YES |
CVE-2006-3449HIGH Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to execute arbitrary commands via a malformed | Aug 9, 2006 | 7.5 | 42 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (79 CVEs).
CISA KEV
4 CVEs
5.1% of CVEs· 97th percentile
Metasploit
1 CVE
1.3% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
10 CVEs
12.7% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (79 CVEs).
Media Mentions
Signals from CVEs in this product scope (79 CVEs).
Top CNAs Publishing CVEs For Powerpoint
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| v.x | 1 | 7.5 | 17.4% | 0 | 0 |
| 98 | 1 | 7.5 | 17.4% | 0 | 0 |
| 97 | 3 | 7.3 | 5.5% | 0 | 0 |
| 95 | 1 | 7.5 | 9.4% | 0 | 0 |
| 2016 | 22 | 7.8 | 5.8% | 0 | 1 |
| 2013 | 13 | 7.5 | 14.2% | 0 | 0 |
| 2011 | 1 | 9.3 | 18.9% | 0 | 0 |
| 2010 | 22 | 8.2 | 19.0% | 1 | 2 |
| 2008 | 1 | 9.3 | 30.1% | 0 | 0 |
| 2007 | 15 | 8.5 | 22.2% | 1 | 2 |
| 2004 | 3 | 8.7 | 19.0% | 0 | 0 |
| 2003 | 22 | 7.2 | 25.1% | 3 | 6 |
| 2002 | 17 | 8.2 | 29.2% | 3 | 1 |
| 2001 | 2 | 7.5 | 30.1% | 0 | 0 |
| 2000 | 11 | 7.4 | 24.5% | 2 | 0 |
| 16.83 | 1 | 9.1 | 0.9% | 0 | 0 |