Microsoft has confirmed that the November edition of its Patch Tuesday release will include one critical and one important security fix.

The critical fix addresses a vulnerability in the Microsoft XML Core Services component in Windows 2000, XP, Server 2003, 2008 and Windows Vista.

Microsoft did not disclose the exact nature of the vulnerability, but said that it could allow an attacker to remotely execute code on a targeted system.

The second flaw could also allow an attacker to remotely execute code, but Microsoft rated the issue as important. The vulnerability lies within a component in Windows 2000, XP, Server 2003, Server 2008 and Vista.

Microsoft offered little more on the nature of the vulnerabilities. The software firm typically refrains from disclosing specific details on a flaw until a fix can be released.

The November update comes just two weeks after the disclosure and patching of another critical vulnerability in a Windows component. An attack for the flaw was reported shortly after the company posted the fix.

Microsoft's monthly update is typically released by late evening UK time, or early afternoon US Pacific time.