Microsoft Powerpoint Viewer — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Powerpoint Viewer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2015-1682 — CVSS 9.3 (critical): Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word…
• CVE-2011-0655 — CVSS 9.3 (critical): Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility…
• CVE-2011-0656 — CVSS 9.3 (critical): Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac…
• CVE-2008-3013 — CVSS 9.3 (critical): gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008…
• CVE-2011-3413 — CVSS 9.3 (critical): Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and…
• CVE-2010-2573 — CVSS 9.3 (critical): Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to…
• CVE-2018-8501 — CVSS 8.8 (high): A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in…
• CVE-2016-3360 — CVSS 7.8 (high): Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office…
• CVE-2013-3906 — CVSS 7.8 (high) — actively exploited: GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3…
• CVE-2016-7230 — CVSS 7.8 (high): Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a…
• CVE-2017-8742 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2…
• CVE-2018-8432 — CVSS 7.8 (high): A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft…
• CVE-2018-8628 — CVSS 7.8 (high): A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory…
• CVE-2019-0540 — CVSS 5.5 (medium): A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially…
• CVE-2018-8427 — CVSS 5.5 (medium): An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft…