Priority MEDIUM 46
A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerabil…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03723 · Published 2020-01-14 · No fix listed
Priority MEDIUM 42
Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.05433 · Published 2018-06-26 · No fix listed CWE-426
Priority MEDIUM 42
Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.05433 · Published 2018-06-26 · No fix listed CWE-426
Priority LOW 36
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00468 · Published 2023-03-14 · Fixed in 23.020.0125.0002 CWE-59
Priority LOW 36
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft One…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00873 · Published 2020-07-14 · No fix listed
Priority LOW 33
Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00881 · Published 2025-11-11 · Fixed in 7.42 CWE-22
Priority LOW 33
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0099 · Published 2020-09-11 · Fixed in publication CWE-59
Priority LOW 33
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00934 · Published 2020-09-11 · Fixed in publication
Priority LOW 33
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00967 · Published 2020-09-11 · Fixed in publication CWE-59
Priority LOW 32
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00387 · Published 2026-08-11 · Fixed in 26.095.0519.0003 CWE-59
Priority LOW 31
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01205 · Published 2023-03-14 · Fixed in 14.2.2 CWE-1390
Priority LOW 31
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.0056 · Published 2022-02-09 · Fixed in 6.46
Priority LOW 26
Microsoft OneDrive for Android Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00848 · Published 2023-03-14 · Fixed in 6.73 CWE-200
Priority LOW 26
Microsoft OneDrive for Android Information Disclosure Vulnerability
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00729 · Published 2023-03-14 · Fixed in 6.73 CWE-200
Priority LOW 26
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00768 · Published 2020-04-15 · No fix listed CWE-269