A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers (CVE-2018-0762). By exploiting this vulnerability, an attacker can execute arbitrary code in the context of the current user.