New Windows zero-day surfaces as researcher releases attack code