Attackers can leverage a design weakness in all versions of Windows to carry out code injection attacks that bypass detection by security software.