CVE-2026-72926

A use-after-free vulnerability in Windows Internet Connection Sharing (ICS) enables an authorized attacker to elevate their privileges locally, potentially allowing them to execute arbitrary code with elevated permissions. Organizations utilizing Windows systems with ICS enabled should prioritize patching this vulnerability to mitigate the risk of local privilege escalation attacks.