First the notepad CVE and now this, Microsoft is on a roll.