Microsoft has warned businesses about a major security risk that can allow systems to be attacked to steal data.