Product:
Microsoft Office PowerPoint
Summary
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally. This vulnerability can lead to unauthorized actions being taken by the attacker within the application. It poses a significant risk due to the potential for high confidentiality and integrity impacts.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-41102 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system can manipulate the access controls within Microsoft Office PowerPoint. By leveraging this improper access control, the attacker can perform spoofing attacks, potentially leading to unauthorized actions or data manipulation within the application.
Affected Products
- Microsoft Office PowerPoint: Vulnerable to spoofing attacks due to improper access control.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of Microsoft Office PowerPoint and apply any available security updates. Additionally, restricting local access to the application can help reduce the risk of exploitation.