CVE-2020-0787 Microsoft Windows
Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
- Added
- 2022-01-28
- Federal patch deadline
- 2022-07-28
- Ransomware use
- known