Code leak flaw may exist, admits Microsoft