CVE-2026-70149

Microsoft · Published October 13, 2026

8.8

CVSS v3.1

HIGH

Patch availableGet patch

Description

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability. Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

Affected Products

Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C