Microsoft confirms critical Windows XP bug