CVE-2014-1763

Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.

Date published : 2014-04-27

http://www.securityfocus.com/archive/1/532797/100/0/threaded

VUPEN collects another laptop as IE falls. Microsoft, prepare for validation and responsible disclosure. Next round 3pm. #pwn2own

— Trend Zero Day Initiative (@thezdi) March 12, 2014