spyware vulnerability