This time the patch in question (MS10-015) was for a long-unaddressed Windows kernel bug that could enable elevation-of-privilege control by an attacker. The patch, which was contained in Tuesday’s mammoth security update, was based on a security advisory that Microsoft released in late January.