CVE-2020-0935

—

CVSS 3.1

5.5 medium

EPSS

<1%p53

Published

Apr 15, 2020 (Apr 15, 2020)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.

Vendors: microsoft
Products: onedrive
Weakness: CWE-269
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news3 stories

Microsoft Issues Patches for 3 Bugs Exploited as Zero

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2020Vulnerability in the wildCVE-2020-1020 CVE-2020-0938 CVE-2020-1027+3 CVEs1

Microsoft Patch Tuesday — April 2020: Vulnerability disclosures and Snort coverage

Cisco TalosApr 14, 18:08 UTC · Apr 14, 2020Vulnerability CVE-2020-0939 CVE-2020-0687 CVE-2020-0907+110 CVEs

April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilities

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2020Vulnerability in the wildCVE-2020-1020 CVE-2020-0938 CVE-2020-0935+8 CVEs