PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-72975 Microsoft CVE debrief

CVE-2026-72975 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network. The CVE record was published on 2026-09-08T18:20:23.750Z and has not been modified since then. The NVD entry is currently Analyzed. This vulnerability affects Microsoft Office PowerPoint deployments, which defenders should assess for exposure and prioritize patching to prevent potential information disclosure. The vulnerability has a medium severity and requires verification and patching of affected deployments.

Vendor
Microsoft
Product
Microsoft 365 Apps for Enterprise
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-08
Original CVE updated
2026-09-17
Advisory published
2026-09-08
Advisory updated
2026-09-17

Who should care

Defenders responsible for Microsoft Office PowerPoint deployments should assess exposure and prioritize patching. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify affected scope, review vendor guidance, and plan updates or mitigations. They should also review compensating controls for exposed systems and monitor for potential information attempts

Why it matters

CVE-2026-72975 is a medium-severity vulnerability in Microsoft Office PowerPoint that requires verification and patching of affected deployments to prevent potential information disclosure.

  • Potential information disclosure over the network
  • Verification of affected deployments is necessary
  • Patching vulnerable versions is recommended

Technical summary

CVE-2026-72975 is an out-of-bounds read vulnerability in Microsoft Office PowerPoint. An unauthorized attacker can exploit this vulnerability to disclose information over a network. The vulnerability is caused by improper bounds checking in the PowerPoint application, allowing attackers to access sensitive information. Defenders should focus on patching affected Microsoft Office PowerPoint versions and verifying inventory to mitigate potential risks.

Defensive priority

Medium-priority patching and verification recommended for affected Microsoft Office PowerPoint deployments.

Recommended defensive actions

  • Apply patches for affected Microsoft Office PowerPoint versions
  • Verify and inventory affected deployments
  • Monitor for potential information disclosure attempts

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but do not specify versions or provide additional information on exploitation. A vendor advisory is available.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-72975 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-72975

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-72975 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72975

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.