CVE-2026-70068
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An unauthorized attacker could gain elevated privileges, potentially leading to system integrity compromise.
Recommendation
Apply Windows security updates and monitor the network for suspicious activity.
Other vulnerabilities in Windows Client-Side Caching (CSC) Service
See all- CVE-2026-83699High
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83698High
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-58637High
Use-After-Free vulnerability in Windows Client-Side Caching (CSC) Service. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-20839Medium
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
- CVE-2025-62466High
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS