A researcher found a vulnerability that would let hackers strategically downgrade a target's Windows version to reexpose patched vulnerabilities. Microsoft is working on fixes for the issue.