microsoft tool vulnerability