[rwth-security] Critical Windows code-execution vulnerability went undetected until