CVE-2026-42836

HighCVSS 7.0

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A race condition in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user can escalate privileges, potentially gaining access to sensitive data or system control.

Recommendation

Install the latest Windows security update released by Microsoft.

Other vulnerabilities in Function Discovery Service

CVE-2026-83670High
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS