CVE-2020-0787—Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

PUBLISHEDvulnerability record
2022-01-28 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2020-0787
Project:
Microsoft
Product:
Windows
Date Added:
2022-01-28
Due Date:
2022-07-28
Last Updated:
June 21, 2025

Vulnerability Name

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Description

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2020-0787

Related Weaknesses

browse all CVEs