CVE-2025-64667
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Published Dec 9, 2025 · updated Oct 14, 2026 · microsoft exchange server
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 9, 2025 · NIST NVD
Detected
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Oct 14, 2026 · NIST NVD
Updated
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Affected
- cpe microsoft/exchange server2016
Sources
- CVE.orgVulnerability recordCVE-2025-64667
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-64667
30-day exploitation probability 0.8%
first.org - NIST NVDVulnerability recordCVE-2025-64667
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
nvd.nist.gov