CVE-2026-96107 | Microsoft Windows up to 11 26H2 Windows Phone Service null pointer dereference

November 11, 2026 Yanac

A vulnerability identified as very critical has been detected in Microsoft Windows up to 11 26H2. This vulnerability affects unknown code of the component Windows Phone Service. This manipulation causes null pointer dereference.

This vulnerability appears as CVE-2026-96107. The attack requires local access. There is no available exploit.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More