Microsoft warned Thursday of limited attacks using third-party applications to exploit a Windows flaw.