Live › vulnerability › CVE-2025-64394
Go to dashboardDuring installation of Veeam Backup for Microsoft 365, a low-privileged local user can write arbitrary files with SYSTEM privileges. An attacker can use this to escalate privileges to SYSTEM or crash the service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Hosts running Veeam Backup for Microsoft 365 on Windows where local, non-admin users can log on. The sources do not name the affected versions. Teams that do not run this product on shared or multi-user Windows machines can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2025-64394")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.