There is a vulnerability in jscript9 that could potentially be
exploited to execute arbitrary code when viewing an
attacker-controlled website in Internet Explorer. The vulnerability
has been confirmed on Windows 10 64-bit with the latest security
patches applied.
