Microsoft has issued an advisory warning that hackers are using a new, unpatched bug to target Windows users.