Microsoft Security Updates Galore
A maliciously crafted Excel spreadsheet could bypass macro security settings entirely and execute its macros even when you have macros turned off and a specially crafted word document can execute code due to a buffer overrun in handling a piece of data being read.
A specially crafted web site or HTML email message can: execute its scripts in the "My Computer" zone (meaning have the same privileges as the user logged in on their machine) instead of the "Internet" zone in Internet Explorer; read arbitrary files on your computer and upload it to the attacker; and arbitrarily overwrite any files on your machine in Internet Explorer.
