Microsoft reclassifies a Windows vulnerability after an IBM researcher demonstrates remote code execution