in January 2011. Those bugs, also pegged critical, were in the MDAC ActiveX control that allows users to access databases from within IE.

Another component, dubbed "Dedicated Administrator Connection" (DAC), could also be at the root of the problem, since it also is associated with SQL Server. The DAC lets administrators access a running instance of SQL Server Database Engine for troubleshooting when the server is unresponsive.

Kandek called out the IE update as his top priority next week. The update, marked critical for all editions -- from the ancient IE6 to the one-year-old IE9 -- on Windows XP, Vista and , will probably include fixes for several flaws if Microsoft adheres to its usual practice of combining multiple patches in its six updates each year.

Other updates will address vulnerabilities in all versions of Windows, both for desktops and servers, in Office 2007, in the still-supported Microsoft Works 9, and in Forefront Unified Access Gateway 2010, the company's VPN (virtual private networking) platform that lets enterprise workers connect with corporate applications when outside the office.

Works, which , is guaranteed support until Oct. 9, 2012.