nyanbinary (unvalued goose)https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45584
One job. You had one job.
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
Cat 🐈🥗 (D.Burch) 
@nyanbinary I'm sure they learned their lesson and won't let it ever happen again! 
rk: it’s hyphen-minus actuallyWas it Defender that would execute JS without a sandbox and was trivially exploitable like…a few years ago? I think that was them.
Hovav Shacham@rk @catsalad @nyanbinary Yup, in 2017. @natashenka had a PoC that fit in a tweet.