How severe is CVE-1999-1474?

CVE-1999-1474 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-1999-1474 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-1999-1474?

CVE-1999-1474 primarily affects Microsoft Powerpoint. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-1999-1474?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-1999-1474 published?

CVE-1999-1474 was published on 1999-12-31 and last updated on 2026-06-16.

CVE-1999-1474

CVE-1999-1474 is a high-severity vulnerability in Microsoft Powerpoint with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 9% (95th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Powerpoint
Published: 1999-12-31
Last modified: 2026-06-16

Description

PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.

Frequently asked questions

What is CVE-1999-1474?: PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer.
How severe is CVE-1999-1474?: CVE-1999-1474 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-1999-1474 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-1999-1474?: CVE-1999-1474 primarily affects Microsoft Powerpoint. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-1999-1474?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-1999-1474 published?: CVE-1999-1474 was published on 1999-12-31 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:microsoft:powerpoint:95:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:powerpoint:97:*:*:*:*:*:*:*

More vulnerabilities in Microsoft Powerpoint

CVE-2015-2503 — Critical (CVSS 9.3): Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3,…
CVE-2015-1682 — Critical (CVSS 9.3): Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1,…
CVE-2015-0097 — Critical (CVSS 9.3): Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2…
CVE-2015-0085 — Critical (CVSS 9.3): Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office…
CVE-2011-3413 — Critical (CVSS 9.3): Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…
CVE-2011-3396 — Critical (CVSS 9.3): Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via…

All CVEs affecting Microsoft Powerpoint →