Windows Server 2012 CVE-2026-32093

Local attacker with low-privilege user account access to Windows system running Function Discovery Service (fdwsd.dll). Attacker must execute code locally to trigger race condition during privileged file operations. No victim interaction required. High attack complexity due to race condition timing requirements.

Real-world risk is moderate despite the 7.0 CVSS score. The high attack complexity (AC:H) significantly raises the exploitation bar - race conditions require precise timing, deep technical knowledge of Windows internals, and often multiple attempts. The local attack vector (AV:L) and low privilege requirement (PR:L) mean attackers need existing foothold on target systems, limiting attack surface to insider threats, physical access scenarios, or post-initial-compromise escalation. No public exploit identified at time of analysis reduces immediate weaponization risk. However, the complete compromise potential (C:H/I:H/A:H) affecting all Windows versions from 2012 forward creates substantial exposure in enterprise environments where patching lags. SSVC framework assessment: exploitation status is none (no public POC), automatable is no (race conditions resist automation due to timing variability), technical impact is total (SYSTEM access). Priority should focus on internet-facing systems with Remote Desktop exposure and high-value targets like domain controllers, while standard workstations can follow normal patch cycles.

An attacker with standard user credentials on a corporate workstation runs a custom exploit tool that rapidly creates and destroys Function Discovery Service resource handles while simultaneously modifying associated security descriptors. By winning the race condition during the validation-to-use window, the attacker tricks fdwsd.dll into granting their low-privileged process SYSTEM-level token permissions. With SYSTEM access, the attacker disables endpoint detection, extracts credential hashes from LSASS memory, and establishes persistent backdoor access for lateral movement across the domain.