The FREAK flaw that first surfaced early this week was initially only thought to affect software that relied on OpenSSL or Apple's Secure Transport (think Android, iOS and OS X). Microsoft has since released a security advisory indicating its Windows operating system is also vulnerable.

The Redmond-based company noted that it is aware of a security feature bypass vulnerability in Secure Channel (Schannel) that affects all supported releases of Microsoft Windows. An investigation has verified that the vulnerability could allow an attacker to force the downgrading of the cipher suite used during an SSL / TLS connection.

As outlined earlier this week, the FREAK flaw allows an attacker to request what's called an export cipher. This 512-bit encryption key is very weak by today's standards and can be cracked in roughly half a day for around $100 using Amazon Web services.