MEDIUMCVSS v4 4.3Vulnerability

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-27T19:32:16.133732+00:00
Cvss severity
MEDIUM
Cvss score
4.3
Retrieved at
2026-10-27T19:33:27+00:00
Score
4.3
Cvss version
4.0
Last source
NVD
Cve id
CVE-2025-64394
Cvss vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-10-27T19:33:27+00:00
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published at
2026-10-27T17:16:53.867
Last modified
2026-10-27T17:16:53.867

Related Entities (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2025-64394 (CVSS v4 4.3) — Ninja Signal Threat Intelligence | Ninja Signal