JavaScript to the operating system's API with superuser privileges. These flaws have affected major browsers including Firefox, Internet Explorer, and Safari. Plugins, such as video players, Adobe Flash, and the wide range of ActiveX controls enabled by default in Microsoft Internet Explorer, may also have flaws exploitable via JavaScript (such flaws have been exploited in the past). In Windows Vista, Microsoft has attempted to contain the risks of bugs such as buffer overflows by running the Internet Explorer process with limited privileges. Google Chrome similarly confines its page renderers to their own "sandbox". Web browsers are capable of running JavaScript outside
Pwn2Own not show up. No teams showed up for day three. Chrome and Firefox were not hacked. For 2012 the rules were changed to a capture-the-flag style competition with a point system. The new format caused Charlie Miller, successful at the event in past years, to decide not to attend. At Pwn2Own, Chrome was successfully exploited for the first time. VUPEN declined to reveal how they escaped the sandbox, saying they would sell the information. Internet Explorer 9 on Windows 7 was successfully exploited next. Firefox was the third browser to be hacked using a zero day exploit. Safari on Mac