CVE-2026-97000 is a vulnerability in the Windows USM Communication Manager where a null pointer dereference allows an authorized local attacker to elevate privileges. The flaw can lead to complete compromise of confidentiality, integrity, and availability on the affected system. The vulnerability requires local access with low privileges and high attack complexity, with no user interaction needed.