Windows Client-Side Caching (CSC) Service vulnerabilities

3 known CVE vulnerabilities in Windows Client-Side Caching (CSC) Service, translated and rated.

CVE-2026-58637High
Use-After-Free vulnerability in Windows Client-Side Caching (CSC) Service. Allows an authorized attacker to elevate privileges locally.
CVE-2026-20839Medium
Improper access control in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to disclose information locally.
CVE-2025-62466High
Null pointer dereference in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS