Microsoft Windows Server 2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*
A race condition vulnerability has been identified in the Function Discovery Service (fdwsd.dll) on multiple Windows platforms. This vulnerability allows an authorized attacker to elevate privileges locally by exploiting improper synchronization in concurrent execution using shared resources.
Successful exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.
Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094122, KB5094123, KB5094125, KB5094126, KB5093998, and KB5094041.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.