{"id":"CVE-2026-97000","aliases":[],"cve":{"records":[{"id":"CVE-2026-97000","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-23T20:52:28.738Z","published":"2026-11-10T18:17:53.100Z","modified":"2026-11-13T18:06:43.558Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:06:43.558Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-11T00:25:01.120Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97000","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-476","description":"CWE-476: NULL Pointer Dereference","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19044.0","versionEndExcluding":"10.0.19044.7846"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19045.0","versionEndExcluding":"10.0.19045.7846"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-11T00:23:23.637340Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows USM Communication Manager Elevation of Privilege Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally.","score":7,"severity":"high","published":"2026-11-10T18:17:53.100Z","modified":"2026-11-13T18:06:43.558Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows 10 Version 21H2","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.19044.0","status":"affected","lessThan":"10.0.19044.7846","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-97000"},{"vendor":"Microsoft","name":"Windows 10 Version 22H2","platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.7846","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-97000"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97000"],"sources":[{"name":"CVE","id":"CVE-2026-97000","modified":"2026-11-13T18:06:43.558Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-97000"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7}],"sourceAffected":[],"observedAt":"2026-11-13T18:42:07.081Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:20:35.853Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T11:25:39.670Z","attemptedAt":"2026-11-11T11:25:39.670Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-11T11:25:39.069Z","attemptedAt":"2026-11-11T11:25:39.069Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T11:25:39.729Z","attemptedAt":"2026-11-11T11:25:39.729Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T11:25:38.331Z","attemptedAt":"2026-11-11T11:25:38.331Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-qmjr-q4hf-4cpm","url":"https://github.com/advisories/GHSA-qmjr-q4hf-4cpm","modified":"2026-11-10T21:34:33Z","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T11:25:39.069Z"},{"source":"NVD","id":"CVE-2026-97000","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97000","modified":"2026-11-11T01:17:46.283","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T11:25:39.670Z"},{"source":"ENISA EUVD","id":"EUVD-2026-121829","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121829","modified":"Nov 11, 2026, 12:25:01 AM","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-11-11T11:25:39.729Z"}],"aiSummary":{"text":"A null pointer dereference in Windows USM Communication Manager allows an authorized attacker to elevate privileges locally on Windows 10 Version 21H2 and 22H2. The affected versions are 10.0.19044.0 to 10.0.19044.7846 and 10.0.19045.0 to 10.0.19045.7846.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T03:21:10.245Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-97000"}]}}