CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

CVSS

No CVSS.

References

Link	Resource
https://www.veeam.com/kb4957

Configurations

No configuration.

History

28 Oct 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad que permite a un usuario local con privilegios bajos escribir archivos arbitrarios con privilegios SYSTEM durante la instalación de Veeam Backup for Microsoft 365, lo que puede provocar escalada de privilegios o denegación de servicio.

27 Oct 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-27 17:16

Updated : 2026-10-28 14:47

NVD link : CVE-2025-64394

Mitre link : CVE-2025-64394

CVE.ORG link : CVE-2025-64394

JSON object : View

Products Affected

No product.

CWE

CWE-1386

Insecure Operation on Windows Junction / Mount Point

{"id": "CVE-2025-64394", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "support@hackerone.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.3, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "support@hackerone.com", "affectedData": [{"vendor": "Veeam", "product": "Backup for Microsoft 365", "versions": [{"status": "affected", "version": "8.0", "versionType": "semver", "lessThanOrEqual": "8.6.0.1102"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-27T17:16:53.867", "references": [{"url": "https://www.veeam.com/kb4957", "source": "support@hackerone.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "support@hackerone.com", "description": [{"lang": "en", "value": "CWE-1386"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service."}, {"lang": "es", "value": "Una vulnerabilidad que permite a un usuario local con privilegios bajos escribir archivos arbitrarios con privilegios SYSTEM durante la instalaci\u00f3n de Veeam Backup for Microsoft 365, lo que puede provocar escalada de privilegios o denegaci\u00f3n de servicio."}], "lastModified": "2026-10-28T14:47:07.963", "sourceIdentifier": "support@hackerone.com"}