CVE-2026-32150

HighCVSS 7.0/10Last modified Oct 14, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Apr 14, 2026
Last modified: Oct 14, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-321516.5Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a net CVE-2026-321527.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-321537.8Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.CVE-2026-321547.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-321557.8Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.CVE-2026-321567.4Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.CVE-2026-321578.8Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-321587.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authoriz CVE-2026-321597.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authoriz CVE-2026-32165.0Server-Side Request Forgery (SSRF) vulnerability in Drupal Drupal Canvas allows Server Side Request Forgery.This issue affects Drupal Canvas CVE-2026-321607.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authoriz CVE-2026-321617.5Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an