The vulnerability is a race condition in the Function Discovery Service (fdwsd.dll) caused by concurrent execution and improper synchronization. An authorized local user can exploit this flaw to elevate privileges, potentially gaining higher permissions on the affected Windows system. This weakness involves race condition (CWE-362) and use-after-free (CWE-416).

Affected systems include a wide range of Microsoft Windows client and server releases. On Windows, the vulnerability impacts Windows 10 versions 1607, 1809, 21H2 and 22H2; Windows 11 versions 23H2, 24H2, 25H2 and 26H1; and all listed Windows Server editions from 2012 through 2025, both standard and Server Core builds. The Service runs as a system service, giving any local user the potential to trigger the race.

The CVSS base score is 7, indicating high severity, and there is currently no EPSS information. The flaw is not listed in the CISA KEV catalog. The most likely attack vector is a local, authenticated user triggering concurrent requests to the Function Discovery Service. Because the flaw requires local access, the overall risk to environments with compromised or weakly restricted local accounts is significant, and remediation should be prioritized.