Remote code execution vulnerability in Windows' built-in malware protection allows an attacker to execute code when a crafted file is scanned—one of seven critical bugs addressed in Microsoft's January fix release.