If want to know whether or not to install the latest Microsoft patches in your ICM / Contact Servers here is what you need to do.
Cisco does not publish any OS patches and it is the responsibility of the customer to do so. As a general rule you can install all the security patches from Microsoft but you need to verify first if they have any impact . You need to go to the following link which will lead you to Cisco Security Center:
Please note that Cisco cannot document all possible results when applying MS security patches, therefore Cisco cannot say 'Yes they are safe' as it is always possible that even tested fixes affect items within your environment that Cisco does not have control over or insight to.
Furthermore, you should not enable automatic updates for the operating system or the SQL server.
For example, if you want to install Microsoft's patch KB982214 released in August here is the link you should go to: