CVE-2026-32086: Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

CVE-2026-32086 is an elevation of privilege vulnerability in Windows Function Discovery Service (fdwsd.dll), rated Important by Microsoft, with a CVSS 3.1 base score of 7 (High). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as less likely. The EPSS model estimates a 0.16% probability of exploitation activity in the next 30 days, higher than 5% of all scored vulnerabilities. Microsoft released the fix on 14 April 2026 in the April 2026 Patch Tuesday, delivered through 11 security updates (KB5083768, KB5082123, KB5082142, KB5082200 and more). It affects 31 products in 2 product families (Windows, ESU).

Key facts

CVE ID

CVE-2026-32086

Severity

High CVSS 7

Microsoft severity

Important

Impact

Elevation of Privilege

Exploited in the wild

No

Publicly disclosed

No

Exploitation likelihood

Less Likely

Weakness

CWE-362

EPSS

0.16% (percentile 5%)

CISA KEV

Not listed

Released

14 April 2026

Last updated

14 April 2026

Patch Tuesday

April 2026 Patch Tuesday

Product families

Windows, ESU

CVSS score and vector

Microsoft scores CVE-2026-32086 at 7 (temporal 6.1) using CVSS 3.1. Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

Frequently asked questions (Microsoft)

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker who successfully exploited this vulnerability could gain administrator privileges.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

Affected products (31)

Windows

ESU

Security updates (11)

• KB5083768 (Security Update)
• KB5082123 (Security Update)
• KB5082142 (Security Update)
• KB5082200 (Security Update)
• KB5082063 (Security Update)
• KB5083769 (Security Update)
• KB5082052 (Security Update)
• KB5082060 (Security Update)
• KB5082198 (Security Update)
• KB5082127 (Monthly Rollup)
• KB5082126 (Monthly Rollup)

NIST NVD data

NVD status

Analyzed

NVD CVSS

7 (HIGH)

NVD weakness

CWE-362

Published to NVD

14 April 2026

NVD last modified

21 April 2026

Affected configurations (CPE)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32086 (Vendor Advisory)

Acknowledgments

• Anonymous

Revision history

Related vulnerabilities

Other Windows Function Discovery Service (fdwsd.dll) vulnerabilities

• CVE-2026-42836: Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (High, CVSS 7, June 2026)
• CVE-2026-32150: Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (High, CVSS 7)
• CVE-2026-32093: Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (High, CVSS 7)
• CVE-2026-32087: Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (High, CVSS 7)

More from the April 2026 Patch Tuesday

• CVE-2026-32202: Windows Shell Spoofing Vulnerability (Medium, CVSS 4.3, exploited)
• CVE-2026-32225: Windows Shell Security Feature Bypass Vulnerability (High, CVSS 8.8)
• CVE-2026-32162: Windows COM Elevation of Privilege Vulnerability (High, CVSS 8.4)
• CVE-2026-33826: Windows Active Directory Remote Code Execution Vulnerability (High, CVSS 8)
• CVE-2026-27909: Windows Search Service Elevation of Privilege Vulnerability (High, CVSS 7.8)
• CVE-2026-27914: Microsoft Management Console Elevation of Privilege Vulnerability (High, CVSS 7.8)
• CVE-2026-32152: Desktop Window Manager Elevation of Privilege Vulnerability (High, CVSS 7.8)
• CVE-2026-32154: Desktop Window Manager Elevation of Privilege Vulnerability (High, CVSS 7.8)
• CVE-2026-27913: Windows BitLocker Security Feature Bypass Vulnerability (High, CVSS 7.7)
• CVE-2026-26151: Remote Desktop Spoofing Vulnerability (High, CVSS 7.1)
• CVE-2026-27908: Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability (High, CVSS 7)
• CVE-2026-27921: Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability (High, CVSS 7)

All vulnerabilities of this release: April 2026 Patch Tuesday · April 2026 briefing

Sources

• Microsoft Security Update Guide: CVE-2026-32086
• NIST NVD: CVE-2026-32086
• CVE.org record: CVE-2026-32086