JavaScript to the operating system's API with superuser privileges. These flaws have affected major browsers including Firefox, Internet Explorer, and Safari. Plugins, such as video players, Adobe Flash, and the wide range of ActiveX controls enabled by default in Microsoft Internet Explorer, may also have flaws exploitable via JavaScript (such flaws have been exploited in the past). In Windows Vista, Microsoft has attempted to contain the risks of bugs such as buffer overflows by running the Internet Explorer process with limited privileges. Google Chrome similarly confines its page renderers to their own "sandbox". Web browsers are capable of running JavaScript outside
Pwn2Own $140,000 in prize money. Internet Explorer 11 on Windows 8.1 was successfully exploited by Sebastian Apelt and Andreas Schmidt for a prize of $100,000. Mozilla Firefox was exploited by Jüri Aedla, Mariusz Młyński, and George Hotz each independently, winning $50,000 each. An anonymous participant exploited Google Chrome; however, upon review contest judges declared this a partial win due to one portion of the presentation’s collision with a vulnerability exploited earlier in the week in the Pwnium competition. In 2015, every single prize available was claimed. In 2016, Chrome, Microsoft Edge and Safari were all hacked. Firefox did not even participate