Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.
Product
Microsoft OneDrive for Android vulnerabilities
4 published CVES affecting Microsoft OneDrive for Android, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Microsoft OneDrive for Android CVEs
Newest publication first
-
MediumCVSS 6.5 EPSS 0.88%
-
MediumCVSS 5.5 EPSS 0.85%
Microsoft OneDrive for Android Information Disclosure Vulnerability
-
MediumCVSS 5.5 EPSS 0.73%
Microsoft OneDrive for Android Information Disclosure Vulnerability
-
MediumCVSS 6.8 EPSS 0.56%
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.