CVE-2026-58637
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Use-After-Free vulnerability in Windows Client-Side Caching (CSC) Service. Allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk involves potential privilege escalation by an authorized user, which could lead to full system compromise.
Recommendation
Apply security updates released by Microsoft for Windows.
Other vulnerabilities in Windows Client-Side Caching (CSC) Service
See all- CVE-2026-83699High
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83698High
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-70068High
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-20839Medium
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
- CVE-2025-62466High
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS