Vulnerability · NVD
CVE-2026-41102
CVE-2026-41102, high severity (CVSS 7.1): 1 tracked app concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 7.1
- Exploitation
- 0.3 %
- Tracked apps
- 1
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally.
Attack vector : Local
No user interaction
Show raw CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
0.29%
exploit very unlikely
percentile 22.0%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
Observed affected builds (18)
16.0.19822.20104 16.0.19725.20126 16.0.19530.20070 16.0.19426.20104 16.0.19127.20046 16.0.19029.20080 16.0.16327.20262 16.0.14827.20124 16.0.13929.20196 16.0.13530.20130 16.0.13001.20166 16.0.12624.20224 16.0.12026.20174 16.0.11929.20198 16.0.11425.20132 16.0.11126.20063 16.0.11029.20056 16.0.10827.20078
Vulnerable CPE configurations (1)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
powerpoint Android
|
Android | <16.0.19822.20190 | cpe:2.3:a:microsoft:powerpoint:*:*:*:*:*:android:*:* |
Manage your fleet with Appaloosa
Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.