Risk: High
Microsoft identifies five critical issues, two important issues and one moderate issue in April's Patch Tuesday.
The most critical vulnerabilities are in WordPad and Office Text Converters, Windows HTTP Services, Microsoft DirectShow, Internet Explorer and Microsoft Excel, all of which could allow remote code execution.
Also, important vulnerabilities in Windows could allow elevation of privilege as well as in Microsoft ISA Server and Forefront Threat Management Gateway which could cause denial of service.
There is also a moderate risk of a blended threat vulnerability in SearchPath which could allow elevation of privilege.