It really depends on if you think this is a genuine exploit or not. If it is, look up Microsoft's track record on complying with disclosure and make yourself familiar with responsible disclosure guidelines.
If it's not then you just need to look into the EULA of the specific windows parts affected, so they don't pull your repository. Because that's usually the biggest thing they do if you don't specifically start fights with these companies.
Generally, you're probably fine. If you want me to look over it I can give you my discord or fluxer or whatever. Not an expert, just a Cybersecurity enthusiast.