Onedrive (Microsoft) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2026-08-11. Vendor: Microsoft.
CVEs of Onedrive
- CVE-2026-65680 - CVSS 6.7 (medium), 2026-08-11: Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
- CVE-2025-60722 - CVSS 6.5 (medium), 2025-11-11: Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges…
- CVE-2023-24923 - CVSS 5.5 (medium), 2023-03-14: Microsoft OneDrive for Android Information Disclosure Vulnerability
- CVE-2023-24930 - CVSS 7.8 (high), 2023-03-14: Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
- CVE-2023-24890 - CVSS 6.5 (medium), 2023-03-14: Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
- CVE-2023-24882 - CVSS 5.5 (medium), 2023-03-14: Microsoft OneDrive for Android Information Disclosure Vulnerability
- CVE-2022-23255 - CVSS 6.8 (medium), 2022-02-09: Microsoft OneDrive for Android Security Feature Bypass Vulnerability
- CVE-2020-16853 - CVSS 7.1 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who…
- CVE-2020-16852 - CVSS 7.1 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who…
- CVE-2020-16851 - CVSS 7.1 (high), 2020-09-11: <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who…
- CVE-2020-1465 - CVSS 7.8 (high), 2020-07-14: An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an…
- CVE-2020-0935 - CVSS 5.5 (medium), 2020-04-15: An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows…
- CVE-2020-0654 - CVSS 9.1 (critical), 2020-01-14: A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint…
- CVE-2018-0593 - CVSS 7.8 (high), 2018-06-26: Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified…
- CVE-2018-0592 - CVSS 7.8 (high), 2018-06-26: Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
