Microsoft Windows has a flaw where a contact file can be leveraged with a malicious mailto: link to achieve code execution.