{"id":"CVE-2025-64394","aliases":[],"title":"A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft…","titleSource":"hackerone","descriptionSource":"hackerone","products":[{"vendor":"Veeam","name":"Backup for Microsoft 365","platforms":[],"versions":[{"version":"8.0","status":"affected","lessThanOrEqual":"8.6.0.1102","versionType":"semver"}],"defaultStatus":"unaffected","source":"hackerone","url":"https://www.cve.org/CVERecord?id=CVE-2025-64394"}],"remediation":[],"description":"A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.","severity":"medium","score":4.3,"published":"2026-10-27T16:16:58.979Z","modified":"2026-10-27T16:16:58.979Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://www.veeam.com/kb4957"],"sources":[{"name":"CVE","id":"CVE-2025-64394","modified":"2026-10-27T16:16:58.979Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-64394"}],"assessments":[{"source":"hackerone","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","score":4.3}],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T09:10:39.623Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}