Researchers have reported a new Microsoft vulnerability in Windows Help (HLP) files, coinciding with this week's Patch Tuesday release.