ms14-002

MS14-002 is a Microsoft security bulletin from January 2014 addressing a vulnerability in the Windows kernel that could allow elevation of privilege. The vulnerability, which was publicly disclosed, requires an attacker to have valid logon credentials and the ability to log on locally to a system. Once logged on, the attacker could run a specially crafted application to gain elevated privileges. The security update for this issue was rated Important. Discussions on WindowsForum.com around MS14-002 focus on understanding the bulletin details, the nature of the vulnerability, and the importance of applying the update to protect against local privilege escalation attacks.