SANS has a very nice table of new-ish un-patched Microsoft vulnerabilities. Two of which are newly discovered ones: One for Windows Graphics Rendering Engine and the other one for Internet Explorer. I personally enjoy well formatted tables. Helps me keep my head around the "rumour - public details - proof of concept - vendor statement - vendor workaround - vendor workaround workaround - vendor patch" cycle of so-called 0-day vulnerabilities. Hopefully these 4 (or at the very least the oldest 2) will be patched on the 12th Jan 2011.

Richard