Windows spoofing flaw exploited in earlier zero-day attacks