Microsoft warned users today about a critical unpatched vulnerability in Windows that leaves systems open to attack through malicious websites or email messages.