Microsoft Windows Function Discovery Service Privilege Escalation Vulnerability

A race condition vulnerability has been identified in the Function Discovery Service (fdwsd.dll) on multiple Windows platforms. This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.

Impact

Successful exploitation of this vulnerability could lead to unauthorized administrative privileges.

Remediation

Users can apply the security update KB5082200 for Windows 10 Version 21H2 (x64, ARM64, 32-bit), KB5082142 for Windows Server 2022 (Server Core), KB5082123 for Windows Server 2019 (Server Core) and Windows 10 Version 1809 (x64, 32-bit), KB5082198 for Windows Server 2016 (Server Core) and Windows 10 Version 1607 (x64, 32-bit), KB5082063 for Windows Server 2025 (Server Core) and Windows 11 (x64, ARM64) Version 24H2, KB5082052 for Windows 11 Version 23H2 (x64, ARM64) and KB5082200 for Windows 10 Version 22H2 (x64, ARM64, 32-bit).