Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.
The updates were pre-announced Thursday morning on Microsoft's Web site in order to give IT staffers a sense of how busy they will be next week installing the patches.
One of the updates is considered critical for Windows Vista and XP users because the flaw it fixes could be used by attackers to install unauthorized software on a victim's computer. This update is rated important for Windows Server 2003 users and considered moderate for Windows 2000 users.
The second update, rated important for all Windows users, could allow an attacker to run software with a higher level of privilege on a system than would normally be allowed.
Microsoft did not provide any technical details on the updates.
With just two updates scheduled, January will be a light month by Microsoft's standards. In 2007 the company shipped 69 software updates, an average of just under six per month.

Sign up to receive Security Resource Alerts
A comprehensive security management solution can help you streamline, as well as grow, your current or evolving business. In this way, a strategic security approach can help you increase your competitiveness in these challenging market conditions.
Download now! »Find out how you can effectively collect, normalize and archive enterprise-wide, security-related data that is invaluable for security investigation and compliance reporting.
Download now! »This session focuses on the intersection of role management and identity compliance, and addresses the importance of identity compliance in enterprise governance and the challenges that organizations may face in achieving it.
View now! »