12-Year-Old vulnerability in Windows Defender risked 1 billion devices