Microsoft patches security flaws under active exploit : comp