---
id: "CVE-2026-97000"
page: "https://infrastack.ai/live/CVE-2026-97000"
kind: "vulnerability"
aliases: ["CVE-2026-97000"]
title: "Windows USM Communication Manager: null pointer dereference lets local users gain higher privileges on Windows 10"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 Version 21H2", "fixed": ["10.0.19044.7846"], "affected": "< 10.0.19044.7846", "ecosystem": "vendor"}, {"name": "Windows 10 Version 22H2", "fixed": ["10.0.19045.7846"], "affected": "< 10.0.19045.7846", "ecosystem": "vendor"}]
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "windows", "windows-10"]
not_affected_if: ["no-untrusted-local-users", "windows-11"]
published_at: "2026-11-10T19:22:22+00:00"
first_seen_at: "2026-11-10T19:25:34+00:00"
updated_at: "2026-11-10T19:49:39+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97000", "first_seen_at": "2026-11-10T19:25:34+00:00"}, {"source": "analyst", "url": "https://cveawg.mitre.org/api/cve/CVE-2026-97000", "first_seen_at": "2026-11-10T19:49:39+00:00", "cites": ["https://cveawg.mitre.org/api/cve/CVE-2026-97000", "https://nvd.nist.gov/vuln/detail/CVE-2026-97000"]}]
exploit_sources: []
---

# Windows USM Communication Manager: null pointer dereference lets local users gain higher privileges on Windows 10

Link for people: https://infrastack.ai/live/CVE-2026-97000 (this .md is for agents)

Null pointer dereference (CWE-476) in Windows USM Communication Manager lets an authorized local attacker elevate privileges. Microsoft rates it CVSS 7.0 (high complexity, low privileges required) with exploit code maturity 'unproven'. Microsoft's CVE record lists Windows 10 21H2 and 22H2 as affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows 10 Version 21H2 affected < 10.0.19044.7846 fixed 10.0.19044.7846
- vendor:Windows 10 Version 22H2 affected < 10.0.19045.7846 fixed 10.0.19045.7846

## How to check

Run winver or [System.Environment]::OSVersion in PowerShell. Windows 10 21H2 build below 10.0.19044.7846, or 22H2 build below 10.0.19045.7846, is affected. Windows 11 is not listed in the CVE record.

## Fix

Install the November 2026 Windows 10 cumulative update that brings the build to 10.0.19044.7846 (21H2) or 10.0.19045.7846 (22H2) or later. KB number not read (MSRC page did not render).

## Timeline

- 2026-11-10T19:25:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-97000
- 2026-11-10T19:49:39+00:00 analyst https://cveawg.mitre.org/api/cve/CVE-2026-97000 — Read Microsoft's CNA CVE record and NVD (MSRC page is JS-only, did not render, so KB numbers unread). Affected: Windows 10 21H2 and 22H2 below 10.0.19044.7846 / 10.0.19045.7846. Local, CVSS 7.0, E:U (no exploitation per vendor vector). No PoC or posts searched.

## Documents

- [advisory] CVE-2026-97000 CVE record (Microsoft CNA) https://cveawg.mitre.org/api/cve/CVE-2026-97000
- [describes] NVD CVE-2026-97000 https://nvd.nist.gov/vuln/detail/CVE-2026-97000

## From the sources

Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_