Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.

The bulletin affects a variety of operating system versions, including Windows Vista, Windows Server 2003 service packs 1 and 2, Windows XP Service Pack 2 and Windows 2000 Service Pack 4, according to the company’s advance notification.

To be issued on January 8, the patches will address a remote code execution vulnerability and a local privilege escalation vulnerability.

The former is rated ‘critical’ on Vista and XP, ‘important’ on Windows Server 2003, and ‘moderate’ on Windows 2000.

Microsoft will also release five, non-security, high-priority updates on Microsoft Update and Windows Server Update Services (WSUS), as well as two non-security, high-priority updates on Windows Update and WSUS. More information on the non-security updates will be available on Tuesday.