Microsoft
Microsoft Onedrive: vulnerabilidades y CVE
Microsoft Onedrive tiene 16 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses3
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-65680 | Media (6.7) | 0.39% | — | 11 ago 2026 | Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. |
| CVE-2026-52783 | Alta (8.2) | 0.20% | — | 26 jun 2026 | OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_token plaintext to Rails.cache under the… |
| CVE-2025-60722 | Media (6.5) | 0.82% | — | 11 nov 2025 | Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network. |
| CVE-2023-24930 | Alta (7.8) | 0.47% | — | 14 mar 2023 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability |
| CVE-2023-24923 | Media (5.5) | 0.85% | — | 14 mar 2023 | Microsoft OneDrive for Android Information Disclosure Vulnerability |
| CVE-2023-24890 | Media (6.5) | 1.2% | — | 14 mar 2023 | Microsoft OneDrive for iOS Security Feature Bypass Vulnerability |
| CVE-2023-24882 | Media (5.5) | 0.73% | — | 14 mar 2023 | Microsoft OneDrive for Android Information Disclosure Vulnerability |
| CVE-2022-23255 | Media (6.8) | 0.56% | — | 9 feb 2022 | Microsoft OneDrive for Android Security Feature Bypass Vulnerability |
| CVE-2020-16853 | Alta (7.1) | 0.99% | — | 11 sept 2020 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted… |
| CVE-2020-16852 | Alta (7.1) | 0.93% | — | 11 sept 2020 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted… |
| CVE-2020-16851 | Alta (7.1) | 0.97% | — | 11 sept 2020 | <p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted… |
| CVE-2020-1465 | Alta (7.8) | 0.84% | — | 14 jul 2020 | An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft… |
| CVE-2020-0935 | Media (5.5) | 0.77% | — | 15 abr 2020 | An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'. |
| CVE-2020-0654 | Crítica (9.1) | 3.5% | — | 14 ene 2020 | A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the… |
| CVE-2018-0593 | Alta (7.8) | 5.5% | — | 26 jun 2018 | Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2018-0592 | Alta (7.8) | 5.5% | — | 26 jun 2018 | Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |