CVE Catalog
CVE-2026-85856
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.36%
29th percentile - higher than 29% of all known CVEs
Summary
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
Risk Assessment
An attacker on the local network could exploit the flaw to remotely execute code, potentially leading to system takeover or lateral movement.
Recommendation
Apply the latest Microsoft Windows security updates.
Other vulnerabilities in Windows Internet Connection Sharing (ICS)
Original NVD description (English source)
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS