CVE-2026-20839

MediumCVSS 5.5

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

38th percentile - higher than 38% of all known CVEs

Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.

Risk of sensitive data leakage by an authorized local user, potentially compromising system confidentiality.

Apply the appropriate security update from Microsoft for the CSC service.

Original NVD description (English source)

Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.