CVE-2025-64394
NoneCVSS
—
EPSS
0.1%
Published
Oct 27, 2026
CISA due date
—
The record
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-56857 On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an… CWE-1386
- CVE-2026-41116 Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link… CWE-1386
- CVE-2025-58074 A privilege escalation vulnerability exists during the installation of Norton Secure VPN… CWE-1386