CVE Catalog
CVE-2026-72964
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.28%
21th percentile - higher than 21% of all known CVEs
Summary
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
Risk Assessment
An authorized user could alter ICS settings, potentially leading to unauthorized changes in network configuration.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Internet Connection Sharing
Original NVD description (English source)
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS