---
id: "CVE-2026-119860"
page: "https://infrastack.ai/live/CVE-2026-119860"
kind: "vulnerability"
aliases: ["CVE-2026-119860"]
title: "Windows Internet Connection Sharing: use-after-free lets local user gain privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Internet Connection Sharing", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "internet-connection-sharing", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:04+00:00"
first_seen_at: "2026-11-10T19:24:59+00:00"
updated_at: "2026-11-10T19:51:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119860", "first_seen_at": "2026-11-10T19:24:59+00:00"}]
exploit_sources: []
---

# Windows Internet Connection Sharing: use-after-free lets local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-119860 (this .md is for agents)

A use-after-free bug in Windows Internet Connection Sharing (ICS) lets an attacker who already has an account on the machine raise their privileges. The sources do not describe the exact trigger beyond this.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Internet Connection Sharing affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119860

## From the sources

Use after free in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_