cve 2025 64672

CVE-2025-64672 is a high-severity SharePoint Server spoofing vulnerability affecting on-premises deployments. Classified as a presentation-layer input neutralization problem (CWE-79 / XSS-style), the flaw can be used to impersonate system UI or responses, enabling follow-on attacks. Microsoft's Security Update Guide lists this as a SharePoint spoofing issue that administrators should treat with urgency. The public trackers show a high severity rating, meaning the vulnerability can be exploited to compromise the integrity of SharePoint communications. Administrators are advised to apply the relevant security patch promptly to mitigate the risk of spoofing attacks against their on-premises SharePoint environments.