CVE-2025-64394

Vendor

Veeam

Product

Backup for Microsoft 365

CVSS v4.0

4.3 AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-1386

Exposure class

Collaboration, Backup

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 23
   CVE NVD 4d ago

   A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for…

   A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

   CVSS 4.3 CVE-2025-64394 Veeam