A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.
Microsoft has released emergency Windows 11 / 10 updates again with KB5078127 KB5078132 KB5078129, and KB5078131.