Microsoft patches Windows zero-day used to drop ransomware