CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

CVSS 4.0

4.3CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

CWE

CWE-1386

Published

2026-10-27

Modified

2026-10-27

Record from

the CVE List, synced 2026-10-27

Affected

• veeam:backup for microsoft 365

References

• https://www.veeam.com/kb4957

Check your stackJSON