Microsoft pushed out two fixes to close three vulnerabilities on Patch Tuesday, including two "critical" server-side flaws that do not require any user interaction to be exploited.