Remotely Exploitable Type Confusion in Windows 8, 8.1, 10, Windows Server, etc
Good that it was fixed. But now bad actors will be looking very hard for other bugs in the unsandboxed javascript interpreter. Tempting to just disable windows defender completely.