Windows code-execution zeroday is under active exploit, Microsoft warns