Description
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, gain privileges, execute arbitrary code.
Below is a complete list of vulnerabilities:
- A spoofing vulnerability in Office Out-of-Box Experience can be exploited remotely to spoof user interface.
- A remote code execution vulnerability in Microsoft Purview eDiscovery can be exploited remotely to execute arbitrary code.
Original advisories
Related products
CVE list
- CVE-2025-64676 high
- CVE-2025-64677 critical
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!