MEDIUM 5.5 Published on 2020-04-15

CVE-2020-0935

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.

CVSS v3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected tracked apps

OneDrive

winget:Microsoft.OneDrive

No open vuln.

Vulnerable CPE configurations

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	onedrive Windows	Windows	—	cpe:2.3:a:microsoft:onedrive:-:::::windows::

View on NVD ↗