They forked this one up: Microsoft modifies open-source code, blows hole in Windows Defender

Last updated on September 8th, 2018

A remote-code execution vulnerability in Windows Defender – a flaw that can be exploited by malicious .rar files to run malware on PCs – has been traced back to an open-source archiving tool Microsoft adopted for its own use.