Vulnerability Details CVE-2026-72938
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 58.9%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-72938
-
cpe:2.3:a:microsoft:365_apps:-
-
cpe:2.3:a:microsoft:microsoft_365:-
-
cpe:2.3:a:microsoft:office_2019:-
-
cpe:2.3:a:microsoft:office_2021:-
-
cpe:2.3:a:microsoft:office_2024:-