Microsoft Security Bulletin MS12-027 has been released and includes a critical patch for:
The SQL Server build number is not affected, only the MSCOMCTL.OCX file is updated to version 6.01.9833.
Update: This patch has been replaced by MS12-060.