VULNERABILITY INTELLIGENCE

CVE-2020-0787

CVSS score7.8 HIGH

EPSS probability42.52%

CISA KEVKnown exploited vulnerability

Published2020-03-12

Last modified2026-08-12

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Vendor / product: Microsoft / Windows

Description

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

Weakness classification

nvd@nist.gov: CWE-59
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-59

Primary references

secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource