Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging object confusion in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 7 | 7 |
| Internet_explorer | Microsoft | 8 | 8 |
| Internet_explorer | Microsoft | 9 | 9 |
| Internet_explorer | Microsoft | 10 | 10 |
| Internet_explorer | Microsoft | 11 | 11 |