CVE-2020-1465: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability (CVE-2020-1465) was discovered in Microsoft OneDrive that allows file deletion in arbitrary locations. The vulnerability was disclosed in July 2020 and affects OneDrive for Windows versions prior to 20.114.0607.0002 for all rings. To exploit this vulnerability, an attacker would first need to log on to the system (NVD, Qualys Alert).

The vulnerability exists in Microsoft OneDrive's handling of file operations, specifically affecting system-wide (per machine) installations of OneDrive. The vulnerability has been assigned a CVSS base score of 7.2 and temporal score of 5.3, indicating a high severity level. The vulnerability specifically impacts the OneDrive.exe component (Qualys Alert).

If successfully exploited, an attacker could run a specially crafted application that would allow them to delete files in arbitrary locations on the system. This could potentially lead to system compromise and unauthorized control of the affected system (NVD, Qualys Alert).

The vulnerability requires local access and user authentication for exploitation. An attacker would first need to log on to the system before they could exploit this vulnerability, which somewhat limits its potential for widespread abuse (NVD).

Microsoft has addressed the vulnerability by correcting how Microsoft OneDrive handles file operations. Users are advised to update to OneDrive for Windows version 20.114.0607.0002 or later. The fix is available through the standard Windows update channels (Qualys Alert).