Executive brief
Windows Internet Connection Sharing (ICS) is a Windows feature that enables computers to share their internet connection with other devices on a network. A use-after-free vulnerability in this component allows a remote attacker to execute arbitrary code over the network without authentication, potentially leading to system compromise and lateral movement across connected networks.
Technical details
This is a use-after-free vulnerability in the Windows Internet Connection Sharing (ICS) service, a kernel-mode or user-mode networking component. The vulnerability can be triggered remotely over the network without requiring prior authentication or user interaction. An attacker can exploit this memory corruption flaw to achieve remote code execution, gaining the ability to execute arbitrary code with the privileges of the ICS service. Patches are available from Microsoft.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed