Microsoft has patched a zero-day vulnerability that was disclosed by security researcher Nightmare Eclipse, following what appears to be a contentious relationship between the two parties; a second zero-day from the same researcher also appears to have been addressed.