cve-2026-41102

CVE-2026-41102 is an Important-rated spoofing vulnerability in Microsoft PowerPoint for Android, caused by improper access control. Microsoft published the advisory on May 12, 2026, and the official fix was delivered through the Google Play Store as build 16.0.19822.20190. Customer action is marked as required. This vulnerability highlights that the modern Office attack surface extends beyond Windows desktops and macros into mobile apps integrated with enterprise identity, storage, and collaboration workflows. Even a local Android spoofing bug can have significant implications in enterprise environments.