CVE-2026-32200 Microsoft CVE debrief

Who should care

Defenders responsible for Microsoft Office deployments, particularly those using Microsoft PowerPoint, should assess exposure and prioritize remediation of affected versions.

Why it matters

CVE-2026-32200 is a high-severity vulnerability in Microsoft PowerPoint that allows local code execution. Defenders should assess exposure, prioritize remediation of affected versions, and verify inventory of Microsoft Office deployments.

• Verify exposure of Microsoft PowerPoint installations to this vulnerability
• Remediate affected Microsoft Office versions to prevent local code execution
• Assess inventory of Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024
• Prioritize patching based on deployment context and usage of Microsoft PowerPoint

Technical summary

A use-after-free vulnerability in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally. The vulnerability affects multiple versions of Microsoft Office, including Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024.

Defensive priority

High

Recommended defensive actions

• Assess exposure of Microsoft PowerPoint installations to this vulnerability
• Prioritize remediation of affected Microsoft Office versions
• Verify inventory of Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024
• Apply patches from Microsoft as available

Evidence notes

The CVE record and source item provide details on the vulnerability, but limited information is available on exploitation or impact. There is no evidence of public exploitation, but defenders should verify the inventory of Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2021, and Microsoft Office LTSC 2024. The CVE Program record and NIST NVD detail page offer source-provided CVE metadata and vulnerability assessments. A vendor advisory and patch信息 are

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.