First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2020-0935

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	OneDrive for Windows	unspecified

References

Timeline

Published: Apr 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-09367.1An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled Ta CVE-2020-09375.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information CVE-2020-09387.8A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially CVE-2020-09395.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information CVE-2020-09407.8An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push CVE-2020-09415.5<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successf CVE-2020-09427.1An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka CVE-2020-09434.6An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes CVE-2020-09447.8An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka CVE-2020-09455.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information CVE-2020-09465.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information CVE-2020-09475.5An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information

CVE-2020-0935: Medium severity, CVSS 5.5 | Vulnix