156 matches found
CVE-2026-85856
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
EUVD-2026-99560
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
CVE-2026-85856
A heap-based buffer overflow vulnerability exists in Windows Internet Connection Sharing (ICS) . This flaw allows an authorized attacker to achieve remote code execution over an adjacent network . The vulnerability has a CVSS 3.1 base score of 7.1 (High) , with impacts on confidentiality, integri...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
PT-2026-112817
Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A heap-based buffer overflow occurs in Windows Internet Connection Sharing ICS, which allows an authorized attacker to execute arbitrary code over an adjacent...
Microsoft Windows: CVE-2026-85856: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
CVE-2026-85856: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Internet Connection Sharing ICS allows an authorized attacker to execute code over an adjacent network...
Internet Connection Sharing Windows Code Execution
The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2026-88007 Traefik HTTP/3 Backend NTLM Connection Reuse
Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.0 until 2.11.57 and 3.7.13, the HTTP/3 entrypoint ConnContext does not call service.AddTransportOnContext, so kerberosRoundTripper uses a shared backend transport instead of a transport dedicated to each frontend connection...
CVE-2026-72926
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72964
CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...
CVE-2026-72983
CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...
EUVD-2026-73256
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
SUSE CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-72926: Use After Free
Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...
CVE-2026-72983: Use After Free
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72964: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
AZL-99879 CVE-2026-18924 affecting package tensorflow 2.16.1-11
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-18924 HTTP/2 server push UAF
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...