423 matches found
CVE-2020-16853
CVE-2020-16853 (OneDrive for Windows) : Elevation of Privilege vulnerability in the OneDrive for Windows Desktop client arises from improper handling of symbolic links, allowing a local attacker to overwrite a targeted file with elevated privileges after logging on and executing a crafted applica...
CVE-2020-16851 OneDrive for Windows Elevation of Privilege Vulnerability
...
CVE-2020-16851
CVE-2020-16851 concerns the OneDrive for Windows Desktop updater elevating privileges due to improper handling of symbolic links. The vulnerability could let an attacker with local access exploit a crafted program to overwrite a targeted file with elevated rights after logging on. Microsoft MSRC ...
CVE-2020-16852 OneDrive for Windows Elevation of Privilege Vulnerability
...
CVE-2020-16852
CVE-2020-16852 is a OneDrive for Windows Desktop Elevation of Privilege vulnerability caused by improper handling of symbolic links. An attacker with local access could log on, run a crafted app, and overwrite a targeted file with elevated privileges. The fix is to correct where the OneDrive upda...
Microsoft OneDrive Multiple Elevation of Privilege
The version of Microsoft OneDrive installed on the remote Windows host is prior to 20.170.0824.0001. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists related to handling symbolic links that could allow elevation of privileges. CVE-2020-16851,...
Microsoft OneDrive for Windows Elevation of Privilege Vulnerability (CNVD-2020-54061)
OneDrive is a file hosting service and synchronization service introduced by Microsoft as part of the Web version of Office. An elevation of privilege vulnerability exists in OneDrive for Windows. The vulnerability stems from the OneDrive for Windows desktop application not properly handling...
Microsoft OneDrive for Windows Elevation of Privilege Vulnerability (CNVD-2020-54062)
OneDrive is a file hosting service and synchronization service introduced by Microsoft as part of the Web version of Office. An elevation of privilege vulnerability exists in OneDrive for Windows. The vulnerability stems from the OneDrive for Windows desktop application not properly handling...
Microsoft OneDrive Multiple Vulnerabilities (Sep 2020)
This host is missing an important security update according to Microsoft Security Updates for month of September SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
PT-2020-4024 · Microsoft · Onedrive For Windows
Name of the Vulnerable Software and Affected Versions: OneDrive for Windows affected versions not specified Description: The issue is related to the improper handling of symbolic links by the OneDrive for Windows Desktop application. This could allow an attacker to overwrite a targeted file with ...
PT-2020-4030 · Microsoft · Onedrive For Windows Desktop
Name of the Vulnerable Software and Affected Versions: OneDrive for Windows Desktop affected versions not specified Description: The issue arises from the improper handling of symbolic links by the OneDrive for Windows Desktop application, leading to a potential elevation of privilege. An attacke...
KLA11950 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...
Vulnerabilities fixed in Microsoft Office products
Microsoft fixes multiple vulnerabilities in Microsoft Office and OneDrive products. A malicious party could potentially exploit them to execute arbitrary code, to obtain elevated privileges gain access to sensitive data, or for performing a Cross-Site-Scripting XSS attack. This could include if t...
PT-2020-4019 · Microsoft · Onedrive For Windows Desktop
Name of the Vulnerable Software and Affected Versions: OneDrive for Windows Desktop affected versions not specified Description: The issue arises from the improper handling of symbolic links by the OneDrive for Windows Desktop application, leading to a potential elevation of privilege. An attacke...
Description of the security update for SharePoint Server 2019: August 11, 2020
None None...
OneDrive DLL hijack privilege escalation
There exists a dll hijacking vulnerability in Onedrive versions after 20.073. Recent assessments: bwatters-r7 at July 31, 2020 9:04pm UTC reported: EDIT: This is not a privilege escalation per se. This overwrites the dll and gains injection, but it relies on a second user with greater privileges ...
Microsoft OneDrive Elevation of Privilege (CVE-2020-0935)
The version of Microsoft OneDrive installed on the remote Windows host is prior to 19.232.1124.0010. It is, therefore, affected by an elevation of privilege vulnerability due to the application improperly handling symbolic links. An authenticated, local attacker can exploit this, by running a...