Risk: High
Microsoft identifies three critical and one moderately critical flaw in May's Patch Tuesday.
The three critical flaws, which if exploited may all result in remote code execution, reside in Microsoft Word, Publisher and in Jet Database Engine (Jet) in Windows.
The moderate flaw has been identified and patched in the Microsoft Malware Protection Engine. This security update resolves two privately reported vulnerabilities, which could allow an attacker to construct a specially crafted file that may result in a denial of service.