"I’d be interested to understand what makes this exploit worth reporting to Microsoft instead of keeping for their personal arsenal as they have in the past," says Chris Morales, head of security analytics at Vectra.