CVE-2026-72964— Windows Internet Connection Sharing (ICS) Tampering Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 1607

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

这段关于 Windows 互联网连接共享（ICS）组件的漏洞描述翻译如下： Windows 互联网连接共享（ICS）的关键功能存在缺失认证，允许经过身份验证的攻击者在本地进行数据篡改。 解析： Missing authentication for critical function：关键功能缺乏认证机制。 authorized attacker：指的是已经通过某种身份验证（authorized）的攻击者，通常指本地拥有账户权限的用户。 perform tampering locally**：在本地环境下执行数据/状

CVE-2026-72964 affects Microsoft Windows 10 Version 1607. No confirmed in-the-wild exploitation; assess based on exposure. 这段关于 Windows 互联网连接共享（ICS）组件的漏洞描述翻译如下： Windows 互联网连接共享（ICS）的关键功能存在缺失认证，允许经过身份验证的攻击者在本地进行数据篡改。 解析： Missing authentication for critical function：关键功能缺乏认证机制。 authorized attacker：指的是已经通 CVE-2026-72964 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-72964

I. Basic Information for CVE-2026-72964

Affected Products

II. Public POCs for CVE-2026-72964

III. Intelligence Information for CVE-2026-72964

Vendor Advisories for CVE-2026-72964 (1)

• 🔗 CVE-2026-72964 - Security Update Guide - Microsoft - Windows Internet Connection Sharing (ICS) Tampering Vulnerability vendor-advisory patch

• https://www.cve.org/CVERecord?id=CVE-2026-72964

Same Patch Batch · Microsoft · 2026-09-08 · 966 CVEs total

Showing top 20 of 966 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2026-72964