NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
2022-03-03
2022-03-24
Microsoft Windows Kernel Privilege Escalation Vulnerability
Apply updates per vendor instructions.
Date Added: 2022-03-03
Due Date: 2022-03-24
Vulnerability Name: Microsoft Windows Kernel Privilege Escalation Vulnerability
Required Action: Apply updates per vendor instructions.
Per: http://technet.microsoft.com/en-us/security/bulletin/ms14-002
"This security update also addresses the vulnerability first described in Microsoft Security Advisory 2814486."