Proof-of-concept code released for zero-click critical Windows vuln