Elevation of Privilege Vulnerability in Microsoft OneDrive
CVE-2026-65680

6.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Onedrive For Mac OS
Vendor
CVE Published:
11 August 2026

What is CVE-2026-65680?

An improper link resolution issue in Microsoft OneDrive enables an authorized attacker to exploit the link following process, potentially allowing them to elevate their privileges locally. This vulnerability could lead to unauthorized access to sensitive data or system functions, making it essential for users to implement recommended patches without delay.

Affected Version(s)

OneDrive for MacOS 26.0.0.0 < 26.095.0519.0003

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.