CVE-2015-6168: MS Edge CMarkup::EnsureDeleteCFState use-after-free details

Posted by Berend-Jan Wever on Dec 01

As I am sure you are by now well aware, in November I decided to start
releasing details on all vulnerabilities I found in web-browsers that I
had not released before. As I was unable to publish all of them within a
single month, I will try to continue to publish all my old
vulnerabilities, including those not in web-browser, as long as I can
find some time to do so. If you find this information useful, you can
help me make some time available by…