CVE-2026-65680

MediumCVSS 6.7

Published: 11/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Microsoft OneDrive contains an improper link resolution before file access ('link following') vulnerability that allows an authorized attacker to elevate privileges locally.

Risk Assessment

A local attacker with basic privileges can escalate their privileges, potentially leading to system compromise or access to sensitive data.

Recommendation

Install the latest security updates from Microsoft for OneDrive to fix this vulnerability.

Original NVD description (English source)

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.