CVE-2020-16851

CVE-2020-16851 is an elevation of privilege vulnerability in Microsoft OneDrive for Windows Desktop that allows an attacker to overwrite or delete targeted files with elevated status due to improper handling of symbolic links. With a CVSS score of 7.1 (HIGH), successful exploitation requires local access and running a specially crafted application, but no user interaction. While there is no evidence of active exploitation or public exploit code, the vulnerability has received some community and media attention. Microsoft addressed this by correcting file write operations in the OneDrive updater when running with elevation.