Security Vendor Reports XP SP2 Holes; Microsoft Disputes Claims Windows XP Service Pack 2 (SP2) has 10 unpatched vulnerabilities, a US security firm says. Microsoft, however, ardently disputed the claims, calling them  quot;potentially misleading and possibly erroneous.