A flaw revealed by Google is being exploited by hackers linked to Russia’s government, Microsoft warns. A fix is due next week.