Internet Explorer EPM Sandbox Escape CVE-2014-6350
Project Zero's James Forshaw disclosed three Internet Explorer Enhanced Protected Mode sandbox escapes in August 2014, all fixed in Microsoft's MS14-065 update, with CVE-2014-6350 stemming from weak permissions on the IE broker process that granted the...