Microsoft’s Security Update Guide lists a vulnerability identified as CVE-2025-64677 described as an Office “Out‑of‑Box Experience” (OoBE) spoofing issue — a presentation‑layer flaw that can be used to impersonate setup or first‑run UI elements and coerce users into granting access, consenting...