"Is this a security vulnerability that requires Microsoft to issue a
security update?"
"Microsoft is currently working to develop a security update for Windows
to address this vulnerability. Microsoft will release the security
update once it has reached an appropriate level of quality for broad
distribution."
I certainly am glad that they take their time to assure such quality.