CVE-2025-64394
MEDIUM
MEDIUM
Priority: 0.00
BB Relevance:
24/100
Published: 2026-10-27
Modified: 2026-10-28
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Active
S:
X
AT:
Present
VC:
None
VI:
Low
VA:
High
Description
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.