The flaw was patched in March, and at the time Microsoft stated there was no evidence of its exploitation in the wild.