The host is missing a critical security update according to Microsoft security bulletin, MS10-032. The update is required to fix privilege escalation vulnerabilities. Flaws are present in the Windows kernel-mode drivers, which fails to validate callback parameter and the way it provides outlines of TrueType fonts to usermode applications. Successful exploitation could allow remote attackers to execute arbitrary code or gain sensitive information.