CVE-2020-0935

5.5 mediumEPSS 0.8%

Medium (5.5) in microsoft onedrive. EPSS 0.8% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2020-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:onedrive

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0935
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0935

Check your stack JSON