Live › vulnerability › CVE-2020-0787
Go to dashboardWindows Background Intelligent Transfer Service (BITS) mishandles symbolic links, letting a local user escalate privileges. An attacker who already has a foothold on the machine can run code with SYSTEM privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Windows | vendor | – | – |
Unknown from the sources.
Apply the Microsoft Windows updates per vendor instructions (CISA required action; the sources do not name the patched build).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2020-0787")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.