Microsoft has confirmed a critical vulnerability in Windows Defender that could leak file content data but advised users to do nothing—here’s why.