Msrc Onedrive For Android vulnerabilities

CVE-2025-60722 [MEDIUM] CWE-22 Microsoft OneDrive for Android Elevation of Privilege Vulnerability Microsoft OneDrive for Android Elevation of Privilege Vulnerability Description: Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network. FAQ: What privileges could an attacker gain with successful exploitation? An attacker who successfully exploited this vulnerability could gain unau

CVE-2023-24882 [MEDIUM] Microsoft OneDrive for Android Information Disclosure Vulnerability Microsoft OneDrive for Android Information Disclosure Vulnerability FAQ: According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is information disclosure? The attack itself is carried out locally. For example, when the score indicates that the Attack Vector is Local (AV:L) and User Interaction is Required (UI:R), this could describe an exploit in which

CVE-2023-24923 [MEDIUM] Microsoft OneDrive for Android Information Disclosure Vulnerability Microsoft OneDrive for Android Information Disclosure Vulnerability FAQ: According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is information disclosure? The attack itself is carried out locally. For example, when the score indicates that the Attack Vector is Local (AV:L) and User Interaction is Required (UI:R), this could describe an exploit in which

CVE-2022-23255 [MEDIUM] Microsoft OneDrive for Android Security Feature Bypass Vulnerability Microsoft OneDrive for Android Security Feature Bypass Vulnerability FAQ: According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability? The attacker needs access to an unlocked mobile device to exploit the vulnerability. FAQ: What kind of security feature could be bypassed by successfully exploiting this vulnerability? The authentication to access OneDrive

CVE-2020-0654 [CRITICAL] Microsoft OneDrive for Android Security Feature Bypass Vulnerability Microsoft OneDrive for Android Security Feature Bypass Vulnerability Description: A security feature bypass vulnerability exists in Microsoft OneDrive App for Android. This could allow an attacker to bypass the passcode or fingerprint requirements of the App. The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing links. FAQ: How do I ge