VYPR

OneDrive for Windows Desktop

by Microsoft

CVEs (4)

  • CVE-2020-1465HigJul 14, 2020
    risk 0.51cvss 7.8epss 0.01

    An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft OneDrive Elevation of Privilege Vulnerability'.

  • CVE-2020-16853HigSep 11, 2020
    risk 0.46cvss 7.1epss 0.01

    An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this…

  • CVE-2020-16852HigSep 11, 2020
    risk 0.46cvss 7.1epss 0.01

    An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this…

  • CVE-2020-0935MedApr 15, 2020
    risk 0.36cvss 5.5epss 0.01

    An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.