CVE-2025-47175

Microsoft PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Affected

Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Office LTSC 2024 · Microsoft Office LTSC for Mac 2021 · Microsoft Office LTSC for Mac 2024

CVSS v3.1 MICROSOFT

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

2.39% chance of exploitation in the next 30 days, 84th percentile

Published

2025-06-10

Updated

2026-02-26

Proof-of-concept exploits (1)

• mbanyamer/mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE11★ · 2025-07-02

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52351

References

• CVE Record
• NVD entry

Related

• CVE-2019-7711
• CVE-2021-41579
• CVE-2023-31059
• CVE-2025-24076
• CVE-2025-24813
• CVE-2025-30397