CVE-2026-961072026-11-10Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.Null pointer dereference in Windows Phone Service allows an authorized attacker to elevate privileges locally.