CVE-2026-70149

The Windows Client Side Caching driver (csc.sys) is affected by a vulnerability that allows an authorized attacker to disclose sensitive information locally. The underlying cause is attributed to Heap-based Buffer Overflow and Integer Overflow or Wraparound issues. The impact includes high levels...

CVE-2026-70068

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The issue involves a heap-based buffer overflow (CWE-122) and an untrusted pointer dereference (CWE-822). Exploitation de...

CVE-2026-69940

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to perform information disclosure over a network. The vulnerability is characterized by a Medium severity rating (CVSS 3.1: 6.5), with a network attack vector and low complexity. N...

CVE-2026-69955

An out-of-bounds read vulnerability exists in the Windows Client for NFS . This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 6.5 (Medium) . While the risk is categorized as information disclos...

CVE-2026-70113

The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.

CVE-2026-69949

A heap-based buffer overflow vulnerability exists in Windows Client for NFS . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component or file involved, nor do they provide specific remediation steps or exploit det...

CVE-2026-83699

A stack-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific exploit links are not provided in the documents.

CVE-2026-83580

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploit code or proof-of-concept is provided in the documents. Remediation is noted as an official fix by t...

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network...

Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

Windows Client License Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Windows Client for NFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

Windows Client for NFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

Windows Client License Service Elevation of Privilege Vulnerability

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...