Veeam Backup for M365: Local Priv Escalation via Installer File Write
CVE-2025-64394 Published on October 27, 2026
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.
Weakness Type
CWE-1386
Affected Versions
Veeam Backup for Microsoft 365:- Version 8.0, <= 8.6.0.1102 is affected.