CVE Watch—

CVE-2020-0787

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

CVSS

—

No CVSS

EPSS

42.5%

p99

KEV

YES

Jan 28, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

42.5%EPSS · 30 days42.5%

2026-06-302026-07-16

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Added to KEV

Jan 28, 2022

Remediate by

Jul 28, 2022

Known ransomware use

Yes

Summary description

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-0787

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-59287—

100.0%

KEV—80Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability—CVE-2021-34527—

100.0%

KEV—80Microsoft Windows Print Spooler Remote Code Execution Vulnerability—CVE-2022-30190—

99.9%

KEV—80Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability—CVE-2023-36884—

99.9%

KEV—80Microsoft Windows Search Remote Code Execution Vulnerability—CVE-2008-4250—

99.9%

KEV—80Microsoft Windows Buffer Overflow Vulnerability—CVE-2024-21412—

99.9%

KEV—80Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability—