CVE Catalog
CVE-2026-20828
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.62%
46th percentile - higher than 46% of all known CVEs
Summary
An out-of-bounds read vulnerability in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information via a physical attack.
Risk Assessment
The risk involves potential leakage of sensitive system data due to physical access to the device.
Recommendation
It is recommended to restrict physical access to systems and apply the latest security updates from Microsoft.
Original NVD description (English source)
Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to disclose information with a physical attack.