CVE-2020-0787VulnerabilityPublished 01/28/2022Updated 10/24/2026
CVE-2020-0787: Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Affects Microsoft WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 01/28/2022
- KEV deadline
- 07/28/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 42.5% chance of exploitation in 30 days – higher than 98% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2020-0787 is a privilege elevation vulnerability in Microsoft Windows Background Intelligent Transfer Service (BITS) caused by improper handling of symbolic links. Exploitation allows an attacker to execute arbitrary code with system-level privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions are stated in the provided data.