NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2020-0935

CVSS 3.1: 5.5 medium
EPSS: <1%p53
Published: Apr 15, 2020 · Apr 15, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-0935 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.

Vendors: microsoft

Products: onedrive

Weakness: CWE-269

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

3 stories

Microsoft Issues Patches for 3 Bugs Exploited as Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2020VulnerabilityExploitedCVE-2020-1020 CVE-2020-0938 CVE-2020-1027+33 · 1 read

60

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020VulnerabilityCVE-2020-0939 CVE-2020-0687 CVE-2020-0907+1102 · 1 read

60

April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2020VulnerabilityExploitedCVE-2020-1020 CVE-2020-0938 CVE-2020-0935+82 · 1 read

60