Bad bug found in Microsoft browsing code

If exploited, the bug could let attackers run their own code on victims' machines.