PT-2026-112256

CVE-2026-70149

Published

2026-10-13

Updated

2026-10-16

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver (csc.sys) (affected versions not specified)

Description An issue in the Windows Client Side Caching driver (csc.sys) allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Additionally, this flaw can be used to achieve elevation of privilege, allowing attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Cbwang505

Chengbin Wang

Jonghoi Kim

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

CWE-122: Heap-based Buffer Overflow

Related identifiers