Microsoft Powerpoint For Android
Monthly
Spoofing in Microsoft PowerPoint for Android (versions 16.0.0.0 through 16.0.19822.20189) lets an authorized local attacker misrepresent content or identity by abusing improper access control (CWE-284). The flaw requires low-privilege local access and no user interaction per the CVSS vector, and there is no public exploit identified at time of analysis; EPSS is very low at 0.04% (12th percentile) and CISA SSVC scores exploitation as 'none', indicating no observed activity despite a 'total' technical-impact rating. Microsoft has released a fixed build.
CVE-2026-26133 is an AI command injection vulnerability in Microsoft 365 Copilot and multiple Microsoft mobile/desktop applications that allows remote attackers to disclose sensitive information through crafted AI prompts. The vulnerability affects numerous Microsoft products across iOS, Android, and macOS platforms, requires user interaction, and has a patch available from Microsoft with no current evidence of active exploitation (not in KEV).
Spoofing in Microsoft PowerPoint for Android (versions 16.0.0.0 through 16.0.19822.20189) lets an authorized local attacker misrepresent content or identity by abusing improper access control (CWE-284). The flaw requires low-privilege local access and no user interaction per the CVSS vector, and there is no public exploit identified at time of analysis; EPSS is very low at 0.04% (12th percentile) and CISA SSVC scores exploitation as 'none', indicating no observed activity despite a 'total' technical-impact rating. Microsoft has released a fixed build.
CVE-2026-26133 is an AI command injection vulnerability in Microsoft 365 Copilot and multiple Microsoft mobile/desktop applications that allows remote attackers to disclose sensitive information through crafted AI prompts. The vulnerability affects numerous Microsoft products across iOS, Android, and macOS platforms, requires user interaction, and has a patch available from Microsoft with no current evidence of active exploitation (not in KEV).