A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for…
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Veeam
- Product
- Backup for Microsoft 365
- CVSS v4.0
- 4.3 AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weakness
- CWE-1386
- Exposure class
- Collaboration, Backup
- NVD status
- Received
Why it ranks 23 (Routine)
- CVSS v4.0 4.3 medium
- Exposed product class: backup
- Widely deployed vendor product (Veeam)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2025-64394 on this site · NVD · CVE.org · Vulnpedia