All of the 4 flaws allow remote code execution is properly exploited. Two of the flaws are found within Microsoft Windows, a third one should in Microsoft Office, while the fourth one affects Windows, Internet Explorer, .NET Framework, Office, SQL Server and Visual Studio.
Microsoft has become rather tight lipped in its security bulletins. Some time ago the company would provide readers with data regarding the soon-to-be-patched flaws. However, now the Redmond company seems to be under a thick cloud of secrecy and would rather keep its publicly disclosed info to a minimum.
It look be a way to keep at least some hackers from taking advantage of a certain exploit, but it’s hard to believe that such measures are actually effective.
Hopefully, the company will talk some more after the patch is released.