CVEvulnerability

CVE-2025-64394

4.3 MEDIUM Published 2026-10-27 Modified 2026-10-28 Official page ↗
Status
Awaiting Analysis
Published
2026-10-27
Last modified
2026-10-28
Assigner
[email protected]
CVSS 4.0 ([email protected])
4.3 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-1386

Description

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

Related

Weakness · CWE (1)

  • CWE-1386 Insecure Operation on Windows Junction / Mount Point weakness

References