CVE-2026-119860: Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

Other sources

Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability

— Microsoft

1 affected component

Microsoft Windows Internet Connection Sharing (ICS)

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

An attacker must already be authorized on the affected Windows system and exploit the flaw locally. No user interaction is required.

Successful exploitation can allow elevation of privileges and may affect confidentiality, integrity, and availability of the affected system.

Prioritize systems using Microsoft Windows Internet Connection Sharing (ICS), as the vulnerability is in the ICS component.