4.3Medium
CVE-2025-64394
Description
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Weakness (CWE):
CWE-1386
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Veeam | Backup for Microsoft 365 | 8.0 – ≤ 8.6.0.1102 |