Universal XSS vulnerability discovered in Microsoft Internet Explorer

February 4, 2015 Symantec

A new zero-day vulnerability in Internet Explorer could allow attackers to bypass the same-origin policy through cross-site scripting (XSS).