CVE-2020-0787

Windows BITS service fails to properly handle symbolic links, allowing an attacker with local access to escalate their privileges to system level. This is dangerous because it lets a regular user gain administrative control of the computer.

A local privilege escalation vulnerability in Windows BITS stems from improper symbolic link validation. An authenticated local attacker can exploit this by creating malicious symbolic links that BITS processes with elevated privileges, leading to arbitrary code execution in the SYSTEM context.