cbcvebase.
CVE-2025-60705
published 2025-11-11

CVE-2025-60705: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

Affected

45 ranges· showing 25
VendorProductVersion rangeFixed in
microsoftwindows_10_1607< 10.0.14393.859410.0.14393.8594
microsoftwindows_10_1809< 10.0.17763.802710.0.17763.8027
microsoftwindows_10_21h2< 10.0.19044.657510.0.19044.6575
microsoftwindows_10_22h2< 10.0.19045.657510.0.19045.6575
microsoftwindows_10_version_1607>= 10.0.14393.0 < 10.0.14393.859410.0.14393.8594
microsoftwindows_10_version_1809>= 10.0.17763.0 < 10.0.17763.802710.0.17763.8027
microsoftwindows_10_version_21h2>= 10.0.19044.0 < 10.0.19044.657510.0.19044.6575
microsoftwindows_10_version_22h2>= 10.0.19045.0 < 10.0.19045.657510.0.19045.6575
microsoftwindows_11_23h2< 10.0.22631.619910.0.22631.6199
microsoftwindows_11_24h2< 10.0.26100.709210.0.26100.7092
microsoftwindows_11_25h2< 10.0.26200.709210.0.26200.7092
microsoftwindows_11_version_22h3>= 10.0.22631.0 < 10.0.22631.619910.0.22631.6199
microsoftwindows_11_version_23h2>= 10.0.22631.0 < 10.0.22631.619910.0.22631.6199
microsoftwindows_11_version_24h2>= 10.0.26100.0 < 10.0.26100.717110.0.26100.7171
microsoftwindows_11_version_25h2>= 10.0.26200.0 < 10.0.26200.717110.0.26200.7171
microsoftwindows_server_2008
microsoftwindows_server_2008_r2_service_pack_1>= 6.1.7601.0 < 6.1.7601.280216.1.7601.28021
microsoftwindows_server_2008_service_pack_2>= 6.0.6003.0 < 6.0.6003.236246.0.6003.23624
microsoftwindows_server_2012
microsoftwindows_server_2012>= 6.2.9200.0 < 6.2.9200.257686.2.9200.25768
microsoftwindows_server_2012_r2>= 6.3.9600.0 < 6.3.9600.228696.3.9600.22869
microsoftwindows_server_2016< 10.0.14393.859410.0.14393.8594
microsoftwindows_server_2016>= 10.0.14393.0 < 10.0.14393.859410.0.14393.8594
microsoftwindows_server_2019< 10.0.17763.802710.0.17763.8027
microsoftwindows_server_2019>= 10.0.17763.0 < 10.0.17763.802710.0.17763.8027