PT-2025-28602 · Microsoft · Office Powerpoint

Guang Gong + 2 · Published 2025-07-08 · Updated 2025-09-08 · CVE-2025-49705

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Long Term Servicing Channel (affected versions not specified)

Description A heap-based buffer overflow exists in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally and potentially affect the system. The vulnerability enables remote attackers to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-08522

CVE-2025-49705

Affected Products

Office Powerpoint

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-49705 · Security Note
• https://osv.dev/vulnerability/CVE-2025-49705 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08522 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49705 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49705 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/722711 · Security Note
• https://t.me/cvenotify/129208 · Telegram Post
• https://t.me/msrcreports/2069 · Telegram Post
• https://twitter.com/CVEnew/status/1942633691219427544 · Twitter Post