Microsoft, the technology company, says that it is investigating a vulnerability in Windows. The issue, which was found by an Israeli researcher, revealed a bug in the operating system's kernel driver.

Gil Dabah, a Tel Aviv researcher who goes by the nickname "arkon," found that Windows' kernel harbors a heap overflow vulnerability. Dabah posted a short proof-of-concept to demonstrate the bug on RageStorm.com.

"Microsoft is investigating reports of a possible vulnerability in Windows Kernel... Upon completion of the investigation, Microsoft will take appropriate actions to protect customers," said the company.

Secunia, a bug tracker from Denmark, found the vulnerability in the "Win32k.sys" kernel-mode device driver, the kernel component of the Windows subsystem. The vulnerability can be exploited using "GetClipboardData," an application programming interface (API) that retrieves data from the Window clipboard.

The vulnerability may allow hackers to execute an attack code in kernel mode, which could give rise to malware.

The vulnerability can be found in XP SP3, Server 2003 R2, Vista, Windows 7 and Windows Server 2008 SP2, the tracker said. Secunia has given the flaw its second-lowest ranking in terms of severity of threat.