CVE-2025-64677 - Office Out-of-Box Experience Spoofing Vulnerability

CVE-2025-64677 - Office Out-of-Box Experience Spoofing Vulnerability

CVE ID : CVE-2025-64677 Published : Dec. 18, 2025, 10:16 p.m. | 1 hour, 37 minutes ago Description : Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network. Severity: 8.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
Dec. 18, 2025
Attack Vector: network

Source: Telegram CVE Monitor