The vulnerability could allow an attacker to upgrade unprivileged domain user account privileges to those of a domain administrator account.
The update was released on Tuesday, according to information available on the company's Security Response Center website.
Microsoft said it was aware of limited, targeted attacks that aimed to exploit the security issue at the time it issued the update.
On Tuesday, November 18, 2014, at approximately 10 a.m. PST, we will release an out-of-band security update to address a vulnerability in Windows.
We strongly encourage customers to apply this update as soon as possible, following the directions in the security bulletin.
Written with inputs from Reuters
For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.