6.7
Medium
CVE-2026-65680 Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to…
Description
Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OneDrive for MacOS 26.0 | 26.0.0.0 → < 26.095.0519.0003 | 26.095.0519.0003 |