CVE-2020-16852

CVE-2020-16852 is a OneDrive for Windows Desktop Elevation of Privilege vulnerability caused by improper handling of symbolic links. An attacker with local access could log on, run a crafted app, and overwrite a targeted file with elevated privileges. The fix is to correct where the OneDrive upda...

CVE-2020-1465

CVE-2020-1465 affects Microsoft OneDrive. It is an elevation of privilege vulnerability that enables file deletion in arbitrary locations after a local login. Microsoft’s advisory (MSRC) states the fix is delivered by updating OneDrive to a newer build (e.g., 20.084.0426.0007); CVSS metrics on re...

CVE-2020-16851

CVE-2020-16851 concerns the OneDrive for Windows Desktop updater elevating privileges due to improper handling of symbolic links. The vulnerability could let an attacker with local access exploit a crafted program to overwrite a targeted file with elevated rights after logging on. Microsoft MSRC ...

CVE-2022-23255

CVE-2022-23255 corresponds to a security feature bypass in Microsoft OneDrive for Android. Connected sources (PT-2022-1677 and NCSC-2022-0103) describe an improper authorization flaw that allows bypassing security controls on OneDrive for Android, potentially enabling access to protected informat...

CVE-2020-0935

CVE-2020-0935 (OneDrive for Windows Elevation of Privilege) is a local elevation-of-privilege flaw in the OneDrive for Windows Desktop application caused by improper handling of symbolic links. An authenticated, local attacker could run a specially crafted program to overwrite a target file, gain...

CVE-2020-0654

CVE-2020-0654 affects Microsoft OneDrive App for Android. A security feature bypass exists where an attacker could bypass passcode or fingerprint requirements by abusing how sharing links are handled. The issue is addressed by a security update that fixes the way the OneDrive Android app processe...

CVE-2020-16853

CVE-2020-16853 (OneDrive for Windows) : Elevation of Privilege vulnerability in the OneDrive for Windows Desktop client arises from improper handling of symbolic links, allowing a local attacker to overwrite a targeted file with elevated privileges after logging on and executing a crafted applica...

CVE-2018-0592

CVE-2018-0592 affects Microsoft OneDrive with an untrusted search path/DLL planting issue. The vulnerability arises when a Trojan horse DLL placed in the application’s directory can execute with the user’s privileges, enabling arbitrary code execution if exploited locally. Affected context is the...

CVE-2018-0593

The CVE-2018-0593 entry affects the Microsoft OneDrive installer, which has an untrusted search path vulnerability (DLL planting) that can allow privilege escalation by placing a Trojan DLL in the installer’s directory. Root cause: insecure DLL search order in the installer. Impact described: arb...