Veeam Backup for M365: Local Priv Escalation via Installer File Write
CVE-2025-64394 Published on October 27, 2026

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

NVD

Weakness Type

CWE-1386

Affected Versions

Veeam Backup for Microsoft 365: