They forked this one up: Microsoft modifies open-source code, blows hole in Windows Defender

Rar! That's a scary bug

A remote-code execution vulnerability in Windows Defender - a flaw that can be exploited by malicious .rar files to run malware on PCs - has been traced back to an open-source archiving tool Microsoft adopted for its own use."