CVE-2025-60705

CVE-2025-60705 is a high-severity improper access control vulnerability in the Microsoft Windows Client-Side Caching (CSC) Service, allowing an authenticated local attacker to achieve privilege escalation. With a CVSS score of 7.8, this vulnerability is easily exploitable with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not currently listed in CISA's KEV catalog and lacking public exploit code, it has garnered significant community and media attention, indicating a recognized threat. Organizations should prioritize patching this vulnerability once available to mitigate the risk of local privilege escalation.