Thomas Vanhoutte

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions 10 through 11 **Description** The issue is related to the improper handling of file access permissions, allowing a remote attacker to bypass restrictions and obtain sensitive information via a specially crafted web site. This could potentially lead to the disclosure of arbitrary files on the user's computer. The vulnerability does not allow code execution or direct elevation of user rights but could be used to obtain information for further system compromise. **Recommendations** For Internet Explorer versions 10 and 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 10 through 11 **Description** The issue is related to insufficient access restrictions to certain functions in Internet Explorer, allowing a remote attacker to gain elevated privileges via a crafted web site. This vulnerability can be exploited by running script with elevated privileges under specific conditions, although it does not allow arbitrary code execution on its own. However, it could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the elevated privileges. **Recommendations** For versions 10 and 11, consider restricting access to sensitive functions until a patch is available. As a temporary workaround, consider disabling the execution of scripts with elevated privileges in Internet Explorer until a fix is provided. Restrict the use of Internet Explorer for accessing untrusted web sites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions 7 through 11 **Description** The issue is related to insufficient access restrictions to certain functions in Internet Explorer, allowing a remote attacker to elevate their privileges via a specially crafted website. This can occur when Internet Explorer does not properly validate permissions under specific conditions, potentially allowing script to be run with elevated privileges. These issues by themselves do not allow arbitrary code to be run but could be used in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the elevated privileges when running arbitrary code. **Recommendations** For Internet Explorer versions 7 through 11, consider restricting access to potentially vulnerable functions or modules until a patch is available. As a temporary workaround, disabling the execution of scripts with elevated privileges may help minimize the risk of exploitation. However, specific steps for mitigation are not provided, and thus, at the moment, there is no information about a newer version that contains a fix for this vulnerability.