Actively exploited in the wild

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2022-01-28. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2020-0787

HighCVSS 7.8KEV

Published: 12/03/2020(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

42.52%

99th percentile - higher than 99% of all known CVEs

Summary

Elevation of privilege vulnerability in Windows Background Intelligent Transfer Service (BITS) due to improper handling of symbolic links.

Risk Assessment

Attacker could gain elevated privileges on the system.

Recommendation

Install Windows security updates.

Original NVD description (English source)

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.