Microsoft Windows IE11 VBScript Execution Policy Bypass In MSHTML

MSHTML only checks for the CLSID associated with VBScript when blocking in the Internet Zone, but doesn’t check other VBScript CLSIDs which allow a web page to bypass the security zone policy.

Leave a Reply