CVE-2025-64394

CVSS 4.3 (medium) · published 2026-10-27

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

Weakness: CWE-1386

Source: NVD CVE-2025-64394

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.