CVE-2014-4123

Internet Explorer versions 7 through 11 have a flaw that allows attackers to gain elevated privileges on a victim's computer by tricking them into visiting a malicious website. This is dangerous because the attacker can then perform actions with administrator-level permissions.

An elevation of privilege vulnerability exists in Internet Explorer 7-11 where a remote attacker can craft a malicious web page that, when visited by a user, exploits the vulnerability to gain SYSTEM or administrative privileges. The attack requires user interaction (visiting the malicious site) and was actively exploited in the wild in October 2014.