Microsoft has warned of a vulnerability in its internet information services (IIS) that could allow elevation of privilege.