Vulnerabilities in Microsoft software