FireEye security researchers found a local privilege escalation vulnerability that has apparently already been exploited in a limited number of attacks, and Microsoft rushed out a patch that they said is only a temporary solution to the problem.
Find out more here:
http://www.itproportal.com/2013/11/29/microsoft-rushes-to-patch-windows-xp-security-hole/