CVEFinder.io

CVE-2026-42836

⚠️ high
🔍 Scan for this CVE
Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

CVSS Score
7.0
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-06-09
First Seen: 2026-06-10
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 51.9% of all 329,456 vulnerabilities in our database.

#158,616
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jun 5, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-06-11
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-362 CWE-416

📦 Affected Products 14

Vendor Product Status Affected Versions
microsoft windows_server_2012 Affected
v-
microsoft windows_server_2012 Affected
vr2
microsoft windows_server_2016 Affected
< 10.0.14393.9234
microsoft windows_server_2019 Affected
< 10.0.17763.8880
microsoft windows_server_2022 Affected
< 10.0.20348.5256
microsoft windows_10_1809 Affected
< 10.0.17763.8880
microsoft windows_10_21h2 Affected
< 10.0.19044.7417
microsoft windows_10_22h2 Affected
< 10.0.19045.7417
microsoft windows_10_1607 Affected
< 10.0.14393.9234
microsoft windows_11_23h2 Affected
< 10.0.22631.7219
microsoft windows_11_24h2 Affected
< 10.0.26100.8655
microsoft windows_server_2025 Affected
< 10.0.26100.32995
microsoft windows_11_25h2 Affected
< 10.0.26200.8655
microsoft windows_11_26h1 Affected
< 10.0.28000.2269

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-34335 ⚠️ high 7.0 0.2 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca... 2026-06-09
CVE-2026-40404 ⚠️ high 7.8 0.3 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 2026-06-09
CVE-2026-40409 ⚠️ high 7.8 0.2 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability 2026-06-09
CVE-2026-41092 ⚠️ high 7.8 0.3 Improper access control in Microsoft Kinect allows an authorized attacker to elevate privileges locally. 2026-06-09
CVE-2026-41108 ⚠️ high 7.0 0.2 Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. 2026-06-09
CVE-2026-42903 🔶 medium 6.5 0.7 Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network. 2026-06-09
These CVEs affect the same products