CVE-2025-62466
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker with local access can exploit this vulnerability to elevate privileges on a Windows system. This could lead to system compromise and access to sensitive data.
Recommendation
Apply security updates provided by Microsoft for the Windows Client-Side Caching (CSC) Service. Regularly update the operating system to patch known vulnerabilities.
Other vulnerabilities in Windows Client-Side Caching (CSC) Service
See all- CVE-2026-58637High
Use-After-Free vulnerability in Windows Client-Side Caching (CSC) Service. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-20839Medium
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS