Summary
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What could an attacker achieve by exploiting this vulnerability?
An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
Security updates
10.0.17763.9245 — https://support.microsoft.com/help/5122876
10.0.20348.5622 — https://support.microsoft.com/help/5122882
10.0.19044.7725 — https://support.microsoft.com/help/5122878
10.0.26100.33438 — https://support.microsoft.com/help/5122871
10.0.26200.9445 — https://support.microsoft.com/help/5124008
10.0.22631.7582 — https://support.microsoft.com/help/5122880
10.0.28000.2954 — https://support.microsoft.com/help/5124012
10.0.14393.9512 — https://support.microsoft.com/help/5123099
Vulnerabilities 1
-
Medium 5.5
Windows Internet Connection Sharing (ICS) Tampering Vulnerability
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-72964 Windows Internet Connection Sharing (ICS) Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72964
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss