CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-03-12
Windows Background Intelligent Transfer Service (BITS) Symbolic Link Local Privilege Escalation Vulnerability (CVE-2020-0787) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the BITS service
[Impact] A local authenticated attacker can exploit improper symbolic link handling to overwrite arbitrary system files and execute code with NT AUTHORITY\SYSTEM privileges
[Mitigation] Apply the official Microsoft security updates immediately, or temporarily disable the BITS service and restrict symbolic link creation privileges for non-admin users