External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

Support Ends for Windows 10 22H2, Windows Server 2012 R2, Exchange 2013, Office 2016