U.S. says Windows vulnerable to attack