Microsoft faces a possible class-action lawsuit, charging that security vulnerabilities in its software violate California consumer-rights laws, including one that protects the privacy of personal data stored in databases. The suit, filed on behalf of a plaintiff last week in Los Angeles Superior Court, also says Microsoft's security warnings are too complex and serve to tip off hackers about flaws. The plaintiff claims to be the victim of identity theft resulting from a hacking incident involving Microsoft software. Microsoft says it will oppose the lawsuit and efforts to make it a class-action suit. A spokesman says Microsoft is committed to developing secure software but that criminals who carry out these attacks are the problem.