CVE-2023-24923

OneDrive for Android is affected by CVE-2023-24923. Connected PT-2023-1786 indicates the issue stems from a lack of protection for service data in OneDrive’s Android implementation, potentially allowing an attacker to access protected information. No specific affected versions or fix/version deta...

CVE-2025-60722

CVE-2025-60722 is a path traversal vulnerability in OneDrive for Android that can lead to elevation of privileges for an authorized user over a network. The advisory set confirms the affected product is OneDrive for Android and notes the root cause as improper pathname handling. Public exploitati...