Microsoft released 16 security bulletins for June, five of which are rated critical for remote code execution (RCE) vulnerabilities. Adobe Flash Player patch is expected to be released on Thursday, June 16. The most troublesome vulnerability is CVE-2016-0025 in Microsoft Word RTF format, which yields RCE for the attacker. Microsoft lists three specific vulnerabilities: two for EoP and one for information disclosure. The biggest batch of important patches are meant to resolve elevation of privilege flaws, although two address RCE bugs.”]