CVE-2025-64394 | BDVDB-2026-396166 Detail
VeeamBackup for Microsoft 365
Description#
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Impact#
Per CVSS v4.0: confidentiality impact none, integrity impact low, availability impact high. Attack vector: local.
Weaknesses#
- CWE-1386 Insecure Operation on Windows Junction / Mount Point
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.