Skip to content
OpenAdvisories
Unscored CVE-2015-6047 EUVD-2015-5990GHSA-cm4c-v7fr-h4j2

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mecha…

Published Oct 14, 2015 · Updated Aug 6, 2024 · Assigned by microsoft

Description

The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Internet Explorer Elevation of Privilege Vulnerability."

References