Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-64394 EUVD-2025-211203GHSA-9h96-gjgh-c298

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backu…

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by hackerone

Description

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

Affected products

VendorProductAffectedFixed
Veeam Backup for Microsoft 365 8.0 – ≤ 8.6.0.1102 —

Advisories 1

References