Microsoft Onedrive vulnerabilities

5 known vulnerabilities affecting microsoft/onedrive.

Total CVEs

5

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM4

Vulnerabilities

Page 1 of 1

CVE-2025-60722MEDIUMCVSS 6.5fixed in 7.422025-11-11

CVE-2025-60722 [MEDIUM] CWE-22 CVE-2025-60722: Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Andro Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.

CVE-2023-24930HIGHCVSS 7.8≥ 22.0.0.0, < 23.020.0125.00022023-03-14

CVE-2023-24930 [HIGH] CWE-59 CVE-2023-24930: Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

CVE-2023-24890MEDIUMCVSS 6.5≥ 1.0.0, < 14.2.22023-03-14

CVE-2023-24890 [MEDIUM] CWE-1390 CVE-2023-24890: Microsoft OneDrive for iOS Security Feature Bypass Vulnerability Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

CVE-2023-24882MEDIUMCVSS 5.5≥ 1.0, < 6.732023-03-14

CVE-2023-24882 [MEDIUM] CWE-200 CVE-2023-24882: Microsoft OneDrive for Android Information Disclosure Vulnerability Microsoft OneDrive for Android Information Disclosure Vulnerability

CVE-2023-24923MEDIUMCVSS 5.5fixed in 6.732023-03-14

CVE-2023-24923 [MEDIUM] CWE-200 CVE-2023-24923: Microsoft OneDrive for Android Information Disclosure Vulnerability Microsoft OneDrive for Android Information Disclosure Vulnerability