CVE-2026-68809

Published: Aug 11, 2026Modified: Aug 14, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.

Affected (10)

Products: Microsoft: 365 Apps, Office 2019, Office 2021, Office 2024, Powerpoint

5 products

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft 365 Apps	All versions
Microsoft 365 Apps	All versions
Microsoft Office 2019	All versions
Microsoft Office 2019	All versions
Microsoft Office 2021	All versions
Microsoft Office 2021	All versions
Microsoft Office 2024	All versions
Microsoft Office 2024	All versions
Microsoft Powerpoint	Version 2016
Microsoft Powerpoint	Version 2016

Related CWEs

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68809

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.