Microsoft plans to release two updates – one critical – as part of the next edition of its Patch Tuesday security bulletin cycle on 11 January.
The critical vulnerability affects all supported versions of Windows (including Windows 7 and 2008R2) while the less serious fix is particular to a flaw that's restricted to Windows Vista. The light patch batch omits fixes for two recently discovered zero-day vulnerabilities in Windows, separate bugs in Windows Graphics Rendering Engine and an earlier Internet Explorer flaw.
Story @ The Register