MS10-070 is a critical ASP.NET vulnerability that should be patched immediately.  It concerns the way ASP.NET handles the encryption of data. You can use Microsoft update to install the patches automatically or you can download the updates directly from Microsoft by going to http://www.microsoft.com/technet/security/bulletin/ms10-070.mspx and selecting the version of windows you are running and selecting the update.