H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2026-01-07
Last seen2026-01-07

Confidence

—

Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an invalid index value that triggers memory corruption.

Labels

exploitedkev

CISA KEV context

Vendor / productMicrosoft Office
Added2026-01-07
Due date2026-01-28
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2009-0556
open
cwe
CWE-94
open