cve.bz

CVE-2009-0556

8.8 highKEVEPSS 67%

High (8.8) in Microsoft Office. In CISA KEV since 2026-01-07. EPSS 67% chance of exploitation in the next 30 days.

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineTextRefAtom containing an an invalid index value that triggers memory corruption, as exploited in the wild in April 2009 by Exploit:Win32/Apptom.gen, aka "Memory Corruption Vulnerability."

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
67% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2026-01-07, due 2026-01-28
CWE
CWE-94
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON