When you try to install a critical update, rollup, hotfix, or security patch, Update.exe may use all or most of your CPU resources.
This behavior will occur if the update uses Update.exe version 5.3.23.4, which requires the Debug Programs user right (SeDebugPrivilege), AND you have revoked this right from administrators.
NOTE: SeDebugPrivilege is granted to administrators and to Local System by default.
NOTE: You can expand the update package (package.exe - x) to check the Properties of Update.exe.
NOTE: Microsoft has updated ms03-042, ms03-043, and ms03-045 to include Update.exe version 5.4.1.0, which does NOT require SeDebugPrivilege.
To workaround this issue, either download the updated packages, or grant the Administrators group the Debug Programs user right.