A memory corruption vulnerability exists in Microsoft Internet Explorer 6, 7, 8, 9, 10 and 11 and can lead to remote code execution.  Exploitation of this vulnerability has been observed in targeted attacks, such as “Operation Clandestine Fox.”