[rwth-security] Microsoft discovers two new remote code execution vulnerabilities