Microsoft OneDrive Elevation of Privilege (CVE-2020-1465)

The version of Microsoft OneDrive installed on the remote Windows host is prior to 20.084.0426.0007. It is, therefore, affected by an elevation of privilege vulnerability that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the...

CVE-2020-1465

CVE-2020-1465 affects Microsoft OneDrive. It is an elevation of privilege vulnerability that enables file deletion in arbitrary locations after a local login. Microsoft’s advisory (MSRC) states the fix is delivered by updating OneDrive to a newer build (e.g., 20.084.0426.0007); CVSS metrics on re...