JavaScript to the operating system's API with superuser privileges. These flaws have affected major browsers including Firefox, Internet Explorer, and Safari. Plugins, such as video players, Adobe Flash, and the wide range of ActiveX controls enabled by default in Microsoft Internet Explorer, may also have flaws exploitable via JavaScript (such flaws have been exploited in the past). In Windows Vista, Microsoft has attempted to contain the risks of bugs such as buffer overflows by running the Internet Explorer process with limited privileges. Google Chrome similarly confines its page renderers to their own "sandbox". Web browsers are capable of running JavaScript outside
Firefox Institute of Standards and Technology (NIST), based on data compiled from the National Vulnerability Database (NVD), Firefox was listed as the fifth-most vulnerable desktop software, with Internet Explorer as the eighth, and Google Chrome as the first. InfoWorld has cited security experts saying that, as Firefox becomes more popular, more vulnerabilities will be found, a claim that Mitchell Baker, president of the Mozilla Foundation, has denied. "There is this idea that market share alone will make you have more vulnerabilities. It is not relational at all," she said. In October 2009, Microsoft's security engineers acknowledged that Firefox was vulnerable to