marco vulnerabilities