Windows shell spoofing vulnerability puts sensitive data at risk