Microsoft patches bug ‘used by Chinese hackers’