OneDrive for Android Path Traversal Privilege Escalation

The vulnerability of the OneDrive for Android file sharing service is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2025-60722

Improper limitation of a pathname to a restricted directory 'path traversal' in OneDrive for Android allows an authorized attacker to elevate privileges over a network...

CVE-2025-60722

Improper limitation of a pathname to a restricted directory 'path traversal' in OneDrive for Android allows an authorized attacker to elevate privileges over a network...

CVE-2025-60722

CVE-2025-60722 is a path traversal vulnerability in OneDrive for Android that can lead to elevation of privileges for an authorized user over a network. The advisory set confirms the affected product is OneDrive for Android and notes the root cause as improper pathname handling. Public exploitati...

EUVD-2025-93427

Improper limitation of a pathname to a restricted directory 'path traversal' in OneDrive for Android allows an authorized attacker to elevate privileges over a network...

Microsoft OneDrive path traversal vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. A path traversal vulnerability exists in Microsoft OneDrive for Android. An attacker can exploit the vulnerability to elevate privileges...

PT-2025-46483

Name of the Vulnerable Software and Affected Versions OneDrive for Android affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as a 'path traversal', exists in OneDrive for Android. This allows an authorized attacker to potentially...

EUVD-2023-28911

Malicious code in bioql PyPI...

OneDrive for Android Service Data Access

The vulnerability of the OneDrive for Android file storage service is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a perpetrator to gain access to protected information...

CVE-2023-24923

Microsoft OneDrive for Android Information Disclosure Vulnerability...

CVE-2023-24882

Microsoft OneDrive for Android Information Disclosure Vulnerability...

OneDrive for Android Authentication Bypass Info Disclosure

The vulnerability of the OneDrive for Android file storage service is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information...

CVE-2022-23255

Microsoft OneDrive for Android Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft OneDrive for Android Security Feature Bypass Vulnerability...

PT-2022-1677 · Microsoft · Onedrive App For Android

Name of the Vulnerable Software and Affected Versions: Microsoft OneDrive for Android affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the file hosting service of OneDrive for Android, associated with improper authorization...

Microsoft OneDrive App for Android Security Bypass Vulnerability

Microsoft OneDrive app is an office cloud drive software. A security vulnerability exists in Microsoft OneDrive App for Android. An attacker can exploit the vulnerability to bypass password or fingerprint authentication...