---
id: "CVE-2026-122179"
page: "https://infrastack.ai/live/CVE-2026-122179"
kind: "vulnerability"
aliases: ["CVE-2026-122179"]
title: "Windows ICS: heap overflow lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "internet-connection-sharing", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:20:35+00:00"
first_seen_at: "2026-11-10T19:25:10+00:00"
updated_at: "2026-11-10T19:50:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-122179", "first_seen_at": "2026-11-10T19:25:10+00:00"}]
exploit_sources: []
---

# Windows ICS: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-122179 (this .md is for agents)

A heap-based buffer overflow in Windows Internet Connection Sharing lets an authorized attacker raise their privileges on the local machine. The attacker needs an existing local account, and the flaw is not reachable from the network according to the description.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-122179

## From the sources

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_