CVE-2026-70149

Summary

The Windows Client Side Caching driver (csc.sys) has a vulnerability that allows local attackers to access sensitive information that should be restricted. This flaw enables unauthorized data disclosure through a kernel-mode driver component.

Exploitability

Exploitation requires local access to a Windows system with the CSC service running, making it moderately difficult to achieve without prior compromise but possible through lateral movement or user interaction.

Blast radius

If exploited, this vulnerability could allow attackers to access cached files and related metadata, potentially exposing sensitive documents, credentials, or application data that was previously protected by the caching mechanism.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the Client Side Caching service immediately using 'sc config csc start= disabled' until a patch is available, as no fixed version has been published yet.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.