Attackers have posted public exploit code for a zero-day Windows vulnerability that could result in privilege escalation.