Flash Broker-Based - Sandbox Escape via Unexpected Directory Lock

Source: https://code.google.com/p/google-security-research/issues/detail?id=279&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id FlashBroker - Junction Check Bypass With Locked Directory IE PM Sandbox Escape 1. Windows 8.1 Internet Explorer Protected Mode Bypass in FlashBrok...

CVE-2015-3081: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172, Adobe AIR SDK before 17.0.0.172, and Adobe AIR SDK & Compiler before 17.0.0.172 allows attackers to bypass the Internet...

CVE-2012-1545: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Internet Explorer 6 through 9, and 10 Consumer Preview, allows remote attackers to bypass Protected Mode or cause a denial of service memory corruption by leveraging access to a Low integrity process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012...

PT-2012-3343

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 9, and 10 Consumer Preview Description The issue allows remote attackers to bypass Protected Mode or cause a denial of service due to memory corruption. This can be achieved by leveraging access t...

CVE-2011-1347

Microsoft Internet Explorer 8 on Windows 7 is affected by a Protected Mode bypass vulnerability (CVE-2011-1347) that allowed an attacker to create arbitrary files by leveraging access to a Low integrity process, demonstrated during Pwn2Own 2011 by Stephen Fewer as the third of three chained vulne...

CVE-2011-1347: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to bypass Protected Mode and create arbitrary files by leveraging access to a Low integrity process, as demonstrated by Stephen Fewer as the third of three chained vulnerabilities during a Pwn2Own...