Microsoft patches four critical security flaws, including an exploited privilege escalation vulnerability in Partner Center.