CVE-2023-24930

CVE-2023-24930 — Microsoft OneDrive for MacOS Privilege Escalation Affected software: OneDrive for MacOS (macOS). The connected Nessus entry specifies that versions prior to 23.043.0226 are affected. Vulnerability: Elevation of privilege. An authenticated, local attacker can escalate to SYSTEM pr...

CVE-2025-60722

CVE-2025-60722 is a path traversal vulnerability in OneDrive for Android that can lead to elevation of privileges for an authorized user over a network. The advisory set confirms the affected product is OneDrive for Android and notes the root cause as improper pathname handling. Public exploitati...

CVE-2020-16852

CVE-2020-16852 is a OneDrive for Windows Desktop Elevation of Privilege vulnerability caused by improper handling of symbolic links. An attacker with local access could log on, run a crafted app, and overwrite a targeted file with elevated privileges. The fix is to correct where the OneDrive upda...

CVE-2023-24882

Technical details for CVE-2023-24882 are not publicly available in the provided documents; monitor for updates from vendors and security advisories.

CVE-2026-65680

CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (“link following”), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...

CVE-2023-24890

CVE-2023-24890 concerns Microsoft OneDrive for iOS and is described in connected sources as a security feature bypass (circumvention of a security measure). Affected product/area: OneDrive for iOS. The available documents identify the vulnerability as bypassing security controls but do not provid...

CVE-2023-24923

OneDrive for Android is affected by CVE-2023-24923. Connected PT-2023-1786 indicates the issue stems from a lack of protection for service data in OneDrive’s Android implementation, potentially allowing an attacker to access protected information. No specific affected versions or fix/version deta...

CVE-2020-1465

CVE-2020-1465 affects Microsoft OneDrive. It is an elevation of privilege vulnerability that enables file deletion in arbitrary locations after a local login. Microsoft’s advisory (MSRC) states the fix is delivered by updating OneDrive to a newer build (e.g., 20.084.0426.0007); CVSS metrics on re...

CVE-2020-16851

CVE-2020-16851 concerns the OneDrive for Windows Desktop updater elevating privileges due to improper handling of symbolic links. The vulnerability could let an attacker with local access exploit a crafted program to overwrite a targeted file with elevated rights after logging on. Microsoft MSRC ...

CVE-2022-23255

CVE-2022-23255 corresponds to a security feature bypass in Microsoft OneDrive for Android. Connected sources (PT-2022-1677 and NCSC-2022-0103) describe an improper authorization flaw that allows bypassing security controls on OneDrive for Android, potentially enabling access to protected informat...

CVE-2020-0654

CVE-2020-0654 affects Microsoft OneDrive App for Android. A security feature bypass exists where an attacker could bypass passcode or fingerprint requirements by abusing how sharing links are handled. The issue is addressed by a security update that fixes the way the OneDrive Android app processe...

CVE-2020-0935

CVE-2020-0935 (OneDrive for Windows Elevation of Privilege) is a local elevation-of-privilege flaw in the OneDrive for Windows Desktop application caused by improper handling of symbolic links. An authenticated, local attacker could run a specially crafted program to overwrite a target file, gain...

CVE-2020-16853

CVE-2020-16853 (OneDrive for Windows) : Elevation of Privilege vulnerability in the OneDrive for Windows Desktop client arises from improper handling of symbolic links, allowing a local attacker to overwrite a targeted file with elevated privileges after logging on and executing a crafted applica...

CVE-2018-0593

The CVE-2018-0593 entry affects the Microsoft OneDrive installer, which has an untrusted search path vulnerability (DLL planting) that can allow privilege escalation by placing a Trojan DLL in the installer’s directory. Root cause: insecure DLL search order in the installer. Impact described: arb...

CVE-2018-0592

CVE-2018-0592 affects Microsoft OneDrive with an untrusted search path/DLL planting issue. The vulnerability arises when a Trojan horse DLL placed in the application’s directory can execute with the user’s privileges, enabling arbitrary code execution if exploited locally. Affected context is the...