Microsoft Windows Client-Side Caching Service Information Disclosure Vulnerability

A vulnerability exists in the Windows Client-Side Caching (CSC) Service due to improper access control, allowing an authorized attacker to locally disclose information. Exploitation of this vulnerability could enable the attacker to read certain portions of heap memory.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can apply the security update for this vulnerability, which is available as part of the January 2026 Monthly Rollup, through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073724 for Windows 10, KB5073723 for Windows Server 2019, and KB5073457 for Windows Server 2022.