Critical MS vulnerabilities could pose spyware threat