CVE-2026-32083

CVE-2026-32083 is a race condition vulnerability in the Windows SSDP Service that permits authorized local users to escalate their privileges through improper synchronization of concurrent resource execution. The flaw affects Windows systems running the SSDP service component. The vulnerability carries a HIGH severity rating with a CVSS score of 7.0, reflecting local attack vector requirements and high complexity conditions, but with significant potential impact including confidentiality, integrity, and availability compromise. Exploitation requires local access and user-level privileges, limiting the attack surface to authenticated threat actors already present on the system. The vulnerability demonstrates minimal exploitation activity, with no current inclusion on the Known Exploited Vulnerabilities catalog and extremely low EPSS probability of 0.0004, indicating negligible active exploitation in the wild. Community attention remains low, and no public exploit code has achieved widespread distribution. Organizations should prioritize this issue based on their internal exposure to untrusted local users rather than external threat landscape pressure.