Bernd Paysan+++ Bug of the month is in Microsoft's AV parser +++
"Mpengine is a vast and complex attack surface, comprising of handlers for dozens of esoteric archive formats, executable packers and cryptors, full system emulators and interpreters for various architectures and languages, and so on. All of this code is accessible to remote attackers."
https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5