CVE-2026-32093

CVE-2026-32093 is a race condition vulnerability in the Windows Function Discovery Service (fdwsd.dll) that permits an authorized local user to escalate their privileges on affected systems. The flaw stems from improper synchronization during concurrent execution when accessing shared resources within the service. The vulnerability carries a CVSS score of 7.0 (HIGH), indicating substantial risk, with a local attack vector requiring high complexity and low-level user privileges. Successful exploitation could allow an attacker to achieve high impact across confidentiality, integrity, and availability. The EPSS score of 0.00055 suggests current real-world exploitation likelihood is minimal relative to the broader CVE landscape. There is no evidence of active exploitation in the wild, and the vulnerability is not currently listed on the KEV catalog or industry hot lists. This nascent threat should be monitored for exploit development, though the high complexity requirement and low EPSS score indicate limited near-term risk for most organizations.