Microsoft on Tuesday released fixes for vulnerabilities in its Windows and Office software, but left several known Word zero-day flaws without a patch.

As part of its monthly patch cycle, Microsoft published four security bulletins with fixes for 10 vulnerabilities. Three of the bulletins are deemed "critical", the company's most serious rating; the fourth is tagged "important", a notch lower. All bulletins, however, address flaws that could allow an attacker to commandeer a PC.

ZDNet UK