Microsoft did not immediately respond to a request for comment on the U.S.-CERT advisory, but the company’s security advisory said, “On completion of this investigation, Microsoft will take the appropriate action to protect our customers, which may include providing a solution through our monthly security update release process, or an out-of-cycle security update, depending on customer needs.”