CVE-2026-32087

CVE-2026-32087 is a heap-based buffer overflow vulnerability in the Windows Function Discovery Service (fdwsd.dll) that permits local privilege escalation by authenticated attackers. The flaw carries a CVSS 3.1 score of 7.0 HIGH with significant confidentiality, integrity, and availability impacts. Exploitation requires local access and low privileges but is rated as moderately difficult due to specific conditions that must be met. There is no evidence of active exploitation in the wild, with the vulnerability absent from CISA's Known Exploited Vulnerabilities catalog and maintaining an inactive status on security tracking lists. The exploit probability remains extremely low at 0.00045 EPSS score, indicating minimal community attention and available exploit code at present.