Risk: High
Microsoft has resumed Patch Tuesday, after having omitted the monthly bulletin in March. Six flaws have been fixed in the latest patch update, five of which are critical and one important.
All five critical flaws can result in remote code execution if successfully exploited; the important flaw was found in Windows Kernel and can result in escalation of privileges if successfully exploited.
Microsoft's latest Patch Tuesday came just a week after it had to hurriedly issue a patch for the critical ANI cursor flaw, which if successfully exploited, could permit attackers to launch a Denial of Service attack or execute arbitrary code.
The latest batch of patches are available at:
http://www.microsoft.com/technet/security/bulletin/ms07-apr.mspx and the ANI flaw security bulletin is available at:
http://www.microsoft.com/technet/security/Bulletin/MS07-017.mspx