CVE-2025-47175 - Microsoft PowerPoint Use-After-Free (UAF) Remote Code Execution PoC

Overview

This repository contains a Proof of Concept (PoC) exploit for the CVE-2025-47175 vulnerability found in Microsoft PowerPoint.
The vulnerability is a Use-After-Free (UAF) bug that allows an attacker to execute arbitrary code by tricking a user into opening a specially crafted PPTX file.

Description

• Vulnerability: Use-After-Free (UAF) in Microsoft PowerPoint
• CVE ID: CVE-2025-47175
• Affected Versions: Microsoft PowerPoint 2019 and Office 365 versions prior to June 2025 Patch (KB5002689)
• Attack Vector: Local — requires victim to open a crafted PPTX file
• Impact: Remote Code Execution (RCE)

This PoC script generates a malicious PPTX file designed to trigger the UAF vulnerability. Opening the generated file in a vulnerable PowerPoint version may lead to arbitrary code execution.

Usage

python3 exploit_cve2025_47175.py [options]

Options

Example

python3 exploit_cve2025_47175.py -o evil.pptx -i 5678 -n "BadShape" -t "Triggering CVE-2025-47175 now!"

Disclaimer

This PoC is for educational and research purposes only. Unauthorized use against systems without explicit permission is illegal. The author is not responsible for any misuse of this code.

Author

Mohammed Idrees Banyamer

• Instagram: @banyamer_security
• GitHub: https://github.com/mbanyamer

References

• Microsoft Security Update Guide
• Exploit-DB