A vulnerability classified as problematic has been found in Microsoft Office Out-of-Box Experience. The impacted element is an unknown function. The manipulation leads to cross site scripting.
This vulnerability is listed as CVE-2025-64677. The attack may be initiated remotely. There is no available exploit.
This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.